Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-32280 (GCVE-0-2026-32280)
Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-07-21 12:05
VLAI
EPSS
VEX
Title
Unexpected work during chain building in crypto/x509
Summary
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Assigner
References
148 references
Impacted products
228 products
| Vendor | Product | Version | |
|---|---|---|---|
| Go standard library | crypto/x509 |
Affected:
0 , < 1.25.9
(semver)
Affected: 1.26.0-0 , < 1.26.2 (semver) |
|
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.1.1-7 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
|
| Red Hat | HawtIO HawtIO 4.4.0 |
Unaffected:
operator-container , < *
(rpm)
cpe:/a:redhat:apache_camel_hawtio:4.4::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:2.5.10-6.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:1.6.5-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:2.6.14-3.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:1.6.5-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 |
Unaffected:
0:1.6.5-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el10 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:2.6.14-3.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:1.6.5-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.25.9-3.el10_1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.1 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:3.7.1-4.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.144.0-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.9.27-7.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
1:0.3.8-5.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.0.0-4.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.0.1-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.26.1-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
7:5.8.2-3.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.4.9-5.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
2:1.22.2-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
2:1.43.1-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.25.9-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
6:0.8.5-2.el10_0.1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:5.2.2-6.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:10.2.6-24.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.4.7-4.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.9.27-3.el10_0.4 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.2.3-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:3.6.1-2.el10_0.4 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.144.0-2.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:134.1-7.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
2:1.39.9-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
6:5.4.0-15.el10_0.2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
2:1.18.1-3.el10_0.2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
1:0.3.2-4.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.25.2-4.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:1.4.0-7.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260422204008.a3795dee , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:9.2.10-30.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:5.1.1-14.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:0.2.5-7.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:3.4.1-10.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260520103055.afee755d , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
8060020260515174849.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
8060020260515174849.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
8060020260515174849.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.25.9-1.el9_7 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:3.6.1-8.el9_7.1 , < *
(rpm)
Unaffected: 0:3.7.1-4.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.144.0-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
1:0.2.7-7.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
6:5.8.2-3.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
2:1.22.2-6.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
2:1.43.1-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
4:1.4.2-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
1:1.9.0-3.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:0.144.0-2.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
2:1.33.15-1.el9_4.1 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
4:4.9.4-20.el9_4.3 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
2:1.14.6-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:1.25.9-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
5:5.4.0-20.el9_6.3 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.144.0-2.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:3.6.1-2.el9_6.4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:5.1.1-14.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:10.2.6-21.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
2:1.39.9-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
1:1.6.2-3.el9_6.1 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
2:1.18.1-5.el9_6.1 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:132.2-7.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
1:0.2.7-1.el9_6.4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
6:0.8.5-2.el9_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
Unaffected:
1:1.4.0-6.rhaos4.14.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.14::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
Unaffected:
3:4.4.1-25.rhaos4.14.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.14::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
Unaffected:
2:1.11.3-7.rhaos4.14.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.14::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
Unaffected:
1:1.4.0-6.rhaos4.15.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.15::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
Unaffected:
2:1.11.3-8.rhaos4.15.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.15::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1:1.4.0-9.rhaos4.17.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
0:4.17.0-202606022046.p2.g144bace.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
0:4.17.0-202606171749.p2.g5bcfbfd.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
0:4.17.0-202606022046.p2.g8ce997d.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
5:5.2.2-19.rhaos4.17.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
4:1.2.9-5.rhaos4.17.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
2:1.16.1-6.rhaos4.17.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1:1.4.0-9.rhaos4.18.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
5:5.2.2-12.rhaos4.18.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
4:1.2.9-6.rhaos4.18.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
2:1.16.1-5.rhaos4.18.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
0:4.18.0-202606021914.p2.gc395190.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
0:4.18.0-202606021914.p2.g9c24d76.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
0:4.18.0-202606021914.p2.g6ea2356.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
4:1.2.5-6.rhaos4.19.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
2:1.18.1-6.rhaos4.19.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenStack Platform 17.1 for RHEL 9 |
Unaffected:
0:3.4.26-9.5.el9ost , < *
(rpm)
cpe:/a:redhat:openstack:17.1::el9 |
|
| Red Hat | Red Hat OpenStack Services on OpenShift 18.0 |
Unaffected:
0:0.1.1-18.0.20260602234716.a95ae05.el9ost , < *
(rpm)
cpe:/a:redhat:openstack:18.0::el9 |
|
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 |
Unaffected:
0:0.0.3-5.el8sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el8 |
|
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 |
Unaffected:
0:0.0.3-5.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el9 |
|
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 |
Unaffected:
0:0.0.3-5.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
|
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | RHEM 1.1 for RHEL 10 |
Unaffected:
0:1.1.3-1.el10em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | RHEM 1.1 for RHEL 9 |
Unaffected:
0:1.1.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1:el9 |
|
| Red Hat | Compliance Operator 1 |
Unaffected:
1781605005 , < *
(rpm)
cpe:/a:redhat:openshift_compliance_operator:1::el9 |
|
| Red Hat | Custom Metric Autoscaler 2.19 |
Unaffected:
1780101239 , < *
(rpm)
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9 |
|
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1781192891 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 |
Unaffected:
1780051640 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
|
| Red Hat | mirror registry for Red Hat OpenShift 2.0 |
Unaffected:
1782177012 , < *
(rpm)
cpe:/a:redhat:mirror_registry:2.0::el8 |
|
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1780106633 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1779991600 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1780297056 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1782203678 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el8 |
|
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1782207490 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1779910504 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el8 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1779910129 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
|
| Red Hat | Multicluster Global Hub 1.4.5 |
Unaffected:
1779838819 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
|
| Red Hat | Multicluster Global Hub 1.6.2 |
Unaffected:
1780320809 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
|
| Red Hat | Network Observability (NETOBSERV) 1.11.2 |
Unaffected:
1778508501 , < *
(rpm)
cpe:/a:redhat:network_observ_optr:1.11::el9 |
|
| Red Hat | OpenShift API for Data Protection 1.4 |
Unaffected:
1779809598 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.4::el9 |
|
| Red Hat | OpenShift API for Data Protection 1.5 |
Unaffected:
1779808027 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.5::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1780238563 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
|
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1777986630 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1782891812 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1777976489 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1778755463 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1777391542 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Developer Hub 1.8 |
Unaffected:
1779841292 , < *
(rpm)
cpe:/a:redhat:rhdh:1.8::el9 |
|
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1777902709 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502438 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194574 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127736 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 |
Unaffected:
1.0.3-1779996197 , < *
(rpm)
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
|
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783914276 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
|
| Red Hat | Red Hat multicluster global hub 1.5.2 |
Unaffected:
1779828691 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
|
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1780513840 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
|
| Red Hat | Red Hat OpenShift Builds 1.7.4 |
Unaffected:
1780374228 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.28 |
Unaffected:
1779829736 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.28::el9 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3.9.1 |
Unaffected:
1778056267 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3.9.1 |
Unaffected:
1778056233 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3.9.1 |
Unaffected:
1778056245 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3.9.1 |
Unaffected:
1776435680 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1777374598 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1777320087 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1777319850 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1777319773 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1778191378 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1777883393 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1777883471 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1778149127 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1778164208 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1777884045 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1777884022 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1778149657 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1778164042 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1778007597 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1778007366 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1778150474 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1778163909 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1778007548 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1778007569 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1778151060 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1778163986 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenStack Services on OpenShift 18.0 |
Unaffected:
1782140297 , < *
(rpm)
cpe:/a:redhat:openstack:18.0::el9 |
|
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1779822261 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
|
| Red Hat | Red Hat Quay 3.14 |
Unaffected:
1779689392 , < *
(rpm)
cpe:/a:redhat:quay:3.14::el8 |
|
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1780891395 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
|
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1779204086 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.17 |
Unaffected:
1779922205 , < *
(rpm)
cpe:/a:redhat:quay:3.17::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1779811473 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780399582 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Web Terminal 1.11 |
Unaffected:
1780423339 , < *
(rpm)
Unaffected: 1784296203 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9 |
|
| Red Hat | Red Hat Web Terminal 1.12 |
Unaffected:
1780425077 , < *
(rpm)
Unaffected: 1784247610 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9 |
|
| Red Hat | Red Hat Web Terminal 1.13 |
Unaffected:
1780425080 , < *
(rpm)
Unaffected: 1784296127 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9 |
|
| Red Hat | Red Hat Web Terminal 1.14 |
Unaffected:
1780424928 , < *
(rpm)
Unaffected: 1784296114 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9 |
|
| Red Hat | Red Hat Web Terminal 1.15 |
Unaffected:
1780424829 , < *
(rpm)
Unaffected: 1784296033 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9 |
|
| Red Hat | Service Telemetry Framework 1.5 |
Unaffected:
1777452570 , < *
(rpm)
cpe:/a:redhat:stf:1.5::el9 |
|
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2 |
|
| Red Hat | cert-manager Operator for Red Hat OpenShift |
cpe:/a:redhat:cert_manager:1 |
|
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1 |
|
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator |
|
| Red Hat | ExternalDNS Operator |
cpe:/a:redhat:ext_dns_optr:1 |
|
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1 |
|
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0 |
|
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1 |
|
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:5 |
|
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4 |
|
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0 |
|
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8 |
|
| Red Hat | mirror registry for Red Hat OpenShift |
cpe:/a:redhat:mirror_registry:1 |
|
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine |
|
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0 |
|
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1 |
|
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring |
|
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2 |
|
| Red Hat | Red Hat AI Inference Server |
cpe:/a:redhat:ai_inference_server:3 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 |
cpe:/a:redhat:certifications:9 |
|
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3 |
|
| Red Hat | Red Hat Hardened Images |
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1 |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4 |
|
| Red Hat | Red Hat OpenShift Dev Workspaces Operator |
cpe:/a:redhat:devworkspace |
|
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config |
|
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1 |
|
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2 |
|
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1 |
|
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3 |
|
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6 |
|
| Red Hat | Red Hat Service Interconnect 1 |
cpe:/a:redhat:service_interconnect:1 |
|
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2 |
|
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1 |
|
| Red Hat | streams for Apache Kafka 3 |
cpe:/a:redhat:amq_streams:3 |
|
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1 |
|
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0 |
Credits
Jakub Ciolek - https://ciolek.dev
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-32280",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-08T17:46:14.569488Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "CWE-770 Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-08T17:46:47.347Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.1.1-7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
],
"defaultStatus": "affected",
"packageName": "hawtio",
"product": "HawtIO HawtIO 4.4.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "operator-container",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.10-6.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.5-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.14-3.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.5-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.5-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.14-3.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.5-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.25.9-3.el10_1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.7.1-4.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.9.27-7.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.3.8-5.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "go-fdo-client",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.0-4.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "go-fdo-server",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.1-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.1-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7:5.8.2-3.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.9-5.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.22.2-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.43.1-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.25.9-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "6:0.8.5-2.el10_0.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.2.2-6.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:10.2.6-24.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.7-4.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.9.27-3.el10_0.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.3-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.6.1-2.el10_0.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:134.1-7.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.39.9-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "6:5.4.0-15.el10_0.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.18.1-3.el10_0.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.3.2-4.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.25.2-4.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.4.0-7.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "go-toolset:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260422204008.a3795dee",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:9.2.10-30.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.1.1-14.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.5-7.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.4.1-10.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260520103055.afee755d",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260515174849.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260515174849.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260515174849.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.25.9-1.el9_7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.6.1-8.el9_7.1",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.7.1-4.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.7-7.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "6:5.8.2-3.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.22.2-6.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.43.1-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "runc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4:1.4.2-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.9.0-3.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.33.15-1.el9_4.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4:4.9.4-20.el9_4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.14.6-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.25.9-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "5:5.4.0-20.el9_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.6.1-2.el9_6.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.1.1-14.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:10.2.6-21.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.39.9-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.6.2-3.el9_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.18.1-5.el9_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:132.2-7.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.7-1.el9_6.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "6:0.8.5-2.el9_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el8"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.4.0-6.rhaos4.14.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el8"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "3:4.4.1-25.rhaos4.14.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el8"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.11.3-7.rhaos4.14.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.15::el8"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.4.0-6.rhaos4.15.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.15::el8"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.11.3-8.rhaos4.15.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el8"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.4.0-9.rhaos4.17.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el8"
],
"defaultStatus": "affected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.17.0-202606022046.p2.g144bace.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el8"
],
"defaultStatus": "affected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.17.0-202606171749.p2.g5bcfbfd.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el8"
],
"defaultStatus": "affected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.17.0-202606022046.p2.g8ce997d.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el8"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "5:5.2.2-19.rhaos4.17.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el8"
],
"defaultStatus": "affected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4:1.2.9-5.rhaos4.17.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el8"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.16.1-6.rhaos4.17.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.4.0-9.rhaos4.18.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "5:5.2.2-12.rhaos4.18.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8"
],
"defaultStatus": "affected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4:1.2.9-6.rhaos4.18.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.16.1-5.rhaos4.18.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8"
],
"defaultStatus": "affected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-202606021914.p2.gc395190.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8"
],
"defaultStatus": "affected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-202606021914.p2.g9c24d76.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8"
],
"defaultStatus": "affected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-202606021914.p2.g6ea2356.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4:1.2.5-6.rhaos4.19.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.18.1-6.rhaos4.19.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.4.26-9.5.el9ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:18.0::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github-openstack-k8s-operators-os-diff",
"product": "Red Hat OpenStack Services on OpenShift 18.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.1.1-18.0.20260602234716.a95ae05.el9ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el8"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.3-5.el8sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.3-5.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.19 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.3-5.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el10em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1:el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "Compliance Operator 1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781605005",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780101239",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781192891",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780051640",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:mirror_registry:2.0::el8"
],
"defaultStatus": "affected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift 2.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782177012",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780106633",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779991600",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780297056",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782203678",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782207490",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779910504",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779910129",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.4.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779838819",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780320809",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability (NETOBSERV) 1.11.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778508501",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779809598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779808027",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/subctl-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780238563",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-rhel8-operator",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782891812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782891812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777976489",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-rhel8-operator",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777976489",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777976489",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777976489",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778755463",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778755463",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777391542",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779841292",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777902709",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.0.3-1779996197",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-registry-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783914276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.5.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779828691",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhel9-operator",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780513840",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780374228",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.28::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.28",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779829736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-collector-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778056267",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-rhel9-operator",
"product": "Red Hat OpenShift distributed tracing 3.9.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778056233",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-target-allocator-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778056245",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776435680",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777374598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel8-operator",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777320087",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/pilot-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777319850",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/ratelimit-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777319773",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778191378",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777883393",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777883471",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778149127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778164208",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777884045",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777884022",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778149657",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778164042",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778007597",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778007366",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778150474",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778163909",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778007548",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778007569",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778151060",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778163986",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:18.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhoso-operators/sg-core-rhel9",
"product": "Red Hat OpenStack Services on OpenShift 18.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782140297",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779822261",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.14::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779689392",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780891395",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779204086",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.17::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779922205",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779811473",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/client-server-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780399582",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780423339",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296203",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780425077",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784247610",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780425080",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780424928",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780424829",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296033",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:stf:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "stf/sg-core-rhel9",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777452570",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"packageName": "dvo/deployment-validation-rhel8-operator",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "affected",
"packageName": "edo/external-dns-rhel8",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "edo/external-dns-rhel9",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "affected",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"packageName": "mta/mta-cli-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:1"
],
"defaultStatus": "affected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-agent-base-rhel9",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-rhel8",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/openshift-golang-builder",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/proxyv2-rhel9",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/openshift-golang-builder",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "unaffected",
"packageName": "openshift-power-monitoring/kepler-rhel9",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp26/3scale-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp26/operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-cpu-rhel9",
"product": "Red Hat AI Inference Server",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-neuron-rhel9",
"product": "Red Hat AI Inference Server",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-tpu-rhel9",
"product": "Red Hat AI Inference Server",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3"
],
"defaultStatus": "affected",
"packageName": "rhaii/vllm-neuron-rhel9",
"product": "Red Hat AI Inference Server",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"packageName": "redhat-certification-preflight",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/coredns-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-script",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-aws-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-azure-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-azure-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gaudi-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gcp-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "golang1.25",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "golang1.26",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-feast-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kf-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-agent-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-router-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kube-auth-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-maas-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-maas-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-serving-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-must-gather-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel8-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-spark-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ta-lmes-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trainer-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-training-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "conmon-rs",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-tools",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-prometheus-promu",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/frr-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/openshift-golang-builder",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift-kuryr",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "cnv4/openshift-golang-builder",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/virt-api",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/virt-api-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel8/osp-director-agent",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "collectd-libpod-stats",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-builder-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite:el8/yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-selinuxd-rhel8",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-danielqsj-kafka_exporter",
"product": "streams for Apache Kafka 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-04-08T01:06:58.595Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-21T12:05:14.608Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"name": "RHBZ#2456339",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24762"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16101"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24761"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28886"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28961"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34097"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21655"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25180"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27076"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14391"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23244"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20569"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23103"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19715"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16024"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19550"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18032"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18027"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17084"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19719"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19750"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20570"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22713"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19714"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20571"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19450"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10217"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29195"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23102"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19133"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22141"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19144"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24470"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22130"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29035"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24716"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33722"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10704"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16875"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11507"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11514"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:15980"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19634"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34192"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34196"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34197"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19721"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20607"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20608"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19722"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16021"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20556"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19839"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28038"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19720"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22709"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24337"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20609"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14200"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10219"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29455"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19350"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19353"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26447"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22309"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29702"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28074"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26571"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26636"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25089"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22862"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22347"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23345"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16874"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25127"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13791"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13829"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13545"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21338"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13826"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22485"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24977"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24359"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21772"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11688"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16476"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16477"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16534"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16505"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16532"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16508"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16535"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16537"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16542"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14162"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39894"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21017"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24853"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22465"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22840"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23361"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24478"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22960"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22958"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22962"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22959"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22961"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21769"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14020"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28441"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22268"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22415"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22422"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28198"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28196"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22258"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22260"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:16101: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:28886: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:28961: Red Hat OpenShift Container Platform 4.15"
},
{
"lang": "en",
"value": "RHSA-2026:34097: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:21655: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:25180: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:27076: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:14391: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:28047: Red Hat OpenStack Platform 17.1"
},
{
"lang": "en",
"value": "RHSA-2026:23244: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0"
},
{
"lang": "en",
"value": "RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:23103: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19715: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:16024: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19550: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:18032: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:18027: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:17084: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19750: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:20570: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:22713: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19714: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:20571: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19450: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:10217: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:29195: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:23102: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19133: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:22141: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19144: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:24470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:22130: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:29035: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:24716: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:10704: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:16875: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:11507: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:11514: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:15980: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:19634: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20608: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19722: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:16021: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20556: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19839: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:28038: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:22709: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:24337: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:14200: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:10219: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:29455: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:29703: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19350: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26447: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:22309: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:29702: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:28074: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26571: Compliance Operator 1"
},
{
"lang": "en",
"value": "RHSA-2026:26636: Custom Metric Autoscaler 2.19"
},
{
"lang": "en",
"value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
},
{
"lang": "en",
"value": "RHSA-2026:22862: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:26585: Logging for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:22347: Multicluster Global Hub 1.4.5"
},
{
"lang": "en",
"value": "RHSA-2026:23345: Multicluster Global Hub 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.2"
},
{
"lang": "en",
"value": "RHSA-2026:29854: OpenShift API for Data Protection 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:26568: OpenShift API for Data Protection 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:13791: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:21338: Red Hat Developer Hub 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:22485: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:24359: Red Hat OpenShift Builds 1.7.4"
},
{
"lang": "en",
"value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
},
{
"lang": "en",
"value": "RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:16477: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:16505: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:16508: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:16537: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:14162: Red Hat OpenShift distributed tracing 3.9.1"
},
{
"lang": "en",
"value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.1"
},
{
"lang": "en",
"value": "RHSA-2026:39894: Red Hat OpenStack Services on OpenShift 18.0"
},
{
"lang": "en",
"value": "RHSA-2026:21017: Red Hat Quay 3.14"
},
{
"lang": "en",
"value": "RHSA-2026:24853: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:19375: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:22465: Red Hat Quay 3.17"
},
{
"lang": "en",
"value": "RHSA-2026:22840: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:23361: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:24478: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:22960: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:22958: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:22962: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:22959: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:22961: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:21769: Red Hat multicluster global hub 1.5.2"
},
{
"lang": "en",
"value": "RHSA-2026:14020: Service Telemetry Framework 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:28441: mirror registry for Red Hat OpenShift 2.0"
},
{
"lang": "en",
"value": "RHSA-2026:22268: multicluster engine for Kubernetes 2.11.0"
},
{
"lang": "en",
"value": "RHSA-2026:22415: multicluster engine for Kubernetes 2.17"
},
{
"lang": "en",
"value": "RHSA-2026:22422: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:28198: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:28196: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:22258: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:22260: multicluster engine for Kubernetes 2.8"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-04-08T02:01:19.572Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-04-08T01:06:58.595Z",
"value": "Made public."
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "crypto/x509",
"product": "crypto/x509",
"programRoutines": [
{
"name": "Certificate.buildChains"
},
{
"name": "Certificate.Verify"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.9",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.2",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Jakub Ciolek - https://ciolek.dev"
}
],
"descriptions": [
{
"lang": "en",
"value": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-770: Allocation of Resources Without Limits or Throttling",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-08T01:06:58.595Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/cl/758320"
},
{
"url": "https://go.dev/issue/78282"
},
{
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"title": "Unexpected work during chain building in crypto/x509"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-32280",
"datePublished": "2026-04-08T01:06:58.595Z",
"dateReserved": "2026-03-11T16:38:46.555Z",
"dateUpdated": "2026-07-21T12:05:14.608Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-32280",
"date": "2026-07-21",
"epss": "0.00615",
"percentile": "0.45558"
},
"microsoft_vex": {
"current_release_date": "2026-06-09T01:40:50.000Z",
"cve": "CVE-2026-32280",
"id": "msrc_CVE-2026-32280",
"initial_release_date": "2026-04-02T00:00:00.000Z",
"product_status:known_affected": "7",
"product_status:known_not_affected": "8",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Unexpected work during chain building in crypto/x509",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-32280.json",
"version": "5"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-32280\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-04-08T02:16:03.247\",\"lastModified\":\"2026-07-21T12:17:57.477\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"crypto/x509\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"crypto/x509\",\"programRoutines\":[{\"name\":\"Certificate.buildChains\"},{\"name\":\"Certificate.Verify\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.9\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.2\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.1.1-7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"HawtIO HawtIO 4.4.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"hawtio\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4.4::el9\"],\"versions\":[{\"version\":\"operator-container\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:2.5.10-6.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:1.6.5-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:2.6.14-3.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:1.6.5-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"],\"versions\":[{\"version\":\"0:1.6.5-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:2.6.14-3.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:1.6.5-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\"],\"versions\":[{\"version\":\"0:1.25.9-3.el10_1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:3.7.1-4.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.144.0-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.9.27-7.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"1:0.3.8-5.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"go-fdo-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.0.0-4.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"go-fdo-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.0.1-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.26.1-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"7:5.8.2-3.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.4.9-5.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"2:1.22.2-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"2:1.43.1-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.25.9-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"6:0.8.5-2.el10_0.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:5.2.2-6.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:10.2.6-24.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.4.7-4.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.9.27-3.el10_0.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.2.3-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:3.6.1-2.el10_0.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.144.0-2.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:134.1-7.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"2:1.39.9-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"6:5.4.0-15.el10_0.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"2:1.18.1-3.el10_0.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"1:0.3.2-4.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.25.2-4.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:1.4.0-7.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260422204008.a3795dee\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:9.2.10-30.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:5.1.1-14.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:0.2.5-7.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:3.4.1-10.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260520103055.afee755d\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"8060020260515174849.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6\"],\"versions\":[{\"version\":\"8060020260515174849.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6\"],\"versions\":[{\"version\":\"8060020260515174849.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:1.25.9-1.el9_7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:3.6.1-8.el9_7.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:3.7.1-4.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"1:0.2.7-7.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"6:5.8.2-3.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"2:1.22.2-6.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"2:1.43.1-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"4:1.4.2-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"1:1.9.0-3.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"2:1.33.15-1.el9_4.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"4:4.9.4-20.el9_4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"2:1.14.6-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:1.25.9-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"5:5.4.0-20.el9_6.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:3.6.1-2.el9_6.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:5.1.1-14.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:10.2.6-21.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"2:1.39.9-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"1:1.6.2-3.el9_6.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"2:1.18.1-5.el9_6.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:132.2-7.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"1:0.2.7-1.el9_6.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"6:0.8.5-2.el9_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el8\"],\"versions\":[{\"version\":\"1:1.4.0-6.rhaos4.14.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el8\"],\"versions\":[{\"version\":\"3:4.4.1-25.rhaos4.14.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el8\"],\"versions\":[{\"version\":\"2:1.11.3-7.rhaos4.14.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el8\"],\"versions\":[{\"version\":\"1:1.4.0-6.rhaos4.15.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el8\"],\"versions\":[{\"version\":\"2:1.11.3-8.rhaos4.15.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el8\"],\"versions\":[{\"version\":\"1:1.4.0-9.rhaos4.17.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el8\"],\"versions\":[{\"version\":\"0:4.17.0-202606022046.p2.g144bace.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el8\"],\"versions\":[{\"version\":\"0:4.17.0-202606171749.p2.g5bcfbfd.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el8\"],\"versions\":[{\"version\":\"0:4.17.0-202606022046.p2.g8ce997d.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el8\"],\"versions\":[{\"version\":\"5:5.2.2-19.rhaos4.17.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el8\"],\"versions\":[{\"version\":\"4:1.2.9-5.rhaos4.17.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el8\"],\"versions\":[{\"version\":\"2:1.16.1-6.rhaos4.17.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\"],\"versions\":[{\"version\":\"1:1.4.0-9.rhaos4.18.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\"],\"versions\":[{\"version\":\"5:5.2.2-12.rhaos4.18.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\"],\"versions\":[{\"version\":\"4:1.2.9-6.rhaos4.18.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\"],\"versions\":[{\"version\":\"2:1.16.1-5.rhaos4.18.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\"],\"versions\":[{\"version\":\"0:4.18.0-202606021914.p2.gc395190.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\"],\"versions\":[{\"version\":\"0:4.18.0-202606021914.p2.g9c24d76.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\"],\"versions\":[{\"version\":\"0:4.18.0-202606021914.p2.g6ea2356.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"4:1.2.5-6.rhaos4.19.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"2:1.18.1-6.rhaos4.19.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1::el9\"],\"versions\":[{\"version\":\"0:3.4.26-9.5.el9ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Services on OpenShift 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang-github-openstack-k8s-operators-os-diff\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0::el9\"],\"versions\":[{\"version\":\"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el8\"],\"versions\":[{\"version\":\"0:0.0.3-5.el8sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el9\"],\"versions\":[{\"version\":\"0:0.0.3-5.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"0:0.0.3-5.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"0:1.1.3-1.el10em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1:el9\"],\"versions\":[{\"version\":\"0:1.1.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Compliance Operator 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"],\"versions\":[{\"version\":\"1781605005\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"],\"versions\":[{\"version\":\"1780101239\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1781192891\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1780051640\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2.0::el8\"],\"versions\":[{\"version\":\"1782177012\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1780106633\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1779991600\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1780297056\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"],\"versions\":[{\"version\":\"1782203678\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1782207490\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el8\"],\"versions\":[{\"version\":\"1779910504\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1779910129\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.4.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1779838819\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1780320809\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability (NETOBSERV) 1.11.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1.11::el9\"],\"versions\":[{\"version\":\"1778508501\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"],\"versions\":[{\"version\":\"1779809598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"],\"versions\":[{\"version\":\"1779808027\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/subctl-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1780238563\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-roxctl-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-v4-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1782891812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-slim-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1782891812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1777976489\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1777976489\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-roxctl-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1777976489\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-v4-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1777976489\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1778755463\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-slim-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1778755463\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1777391542\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.8::el9\"],\"versions\":[{\"version\":\"1779841292\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1777902709\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194574\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"],\"versions\":[{\"version\":\"1.0.3-1779996197\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783914276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.5.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"],\"versions\":[{\"version\":\"1779828691\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1780513840\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1780374228\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.28\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.28::el9\"],\"versions\":[{\"version\":\"1779829736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1778056267\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1778056233\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-target-allocator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1778056245\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776435680\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1777374598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1777320087\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/pilot-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1777319850\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/ratelimit-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1777319773\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1778191378\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1777883393\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1777883471\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1778149127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1778164208\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1777884045\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1777884022\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1778149657\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1778164042\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1778007597\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1778007366\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1778150474\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1778163909\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1778007548\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1778007569\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1778151060\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1778163986\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Services on OpenShift 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoso-operators/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0::el9\"],\"versions\":[{\"version\":\"1782140297\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1779822261\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.14::el8\"],\"versions\":[{\"version\":\"1779689392\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1780891395\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1779204086\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.17::el9\"],\"versions\":[{\"version\":\"1779922205\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1779811473\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/client-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780399582\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"],\"versions\":[{\"version\":\"1780423339\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784296203\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"],\"versions\":[{\"version\":\"1780425077\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784247610\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"],\"versions\":[{\"version\":\"1780425080\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784296127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"],\"versions\":[{\"version\":\"1780424928\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784296114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"],\"versions\":[{\"version\":\"1780424829\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784296033\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"stf/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:stf:1.5::el9\"],\"versions\":[{\"version\":\"1777452570\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dvo/deployment-validation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel8\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel9\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-agent-base-rhel9\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-rhel8\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/kepler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel7-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp26/3scale-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp26/operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhaiis/vllm-cpu-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhaiis/vllm-neuron-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhaiis/vllm-tpu-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhaii/vllm-neuron-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-certification-preflight\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/coredns-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-script\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-aws-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-azure-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-azure-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-gaudi-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-gcp-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1.25\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1.26\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ai-gateway-payload-processing-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-feast-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kf-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-llmisvc-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-router-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kube-auth-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kuberay-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llama-stack-k8s-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-gc-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-processor-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-inference-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-routing-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-api-server-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-launcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-serving-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhaii-cluster-validator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-spark-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ta-lmes-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-th06-cpu-torch291-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-th06-cuda130-torch291-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trainer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-training-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trustyai-service-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workload-variant-autoscaler-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon-rs\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-tools\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-prometheus-promu\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-kuryr\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cnv4/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-api\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-libpod-stats\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-builder-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-selinuxd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-danielqsj-kafka_exporter\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-08T17:46:14.569488Z\",\"id\":\"CVE-2026-32280\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.25.9\",\"matchCriteriaId\":\"C6C9C072-9817-402D-877F-F83584B07017\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.26.0\",\"versionEndExcluding\":\"1.26.2\",\"matchCriteriaId\":\"39FE9BAF-55E9-43AA-B14E-239E7EF1D65D\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/758320\",\"source\":\"security@golang.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://go.dev/issue/78282\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\",\"Release Notes\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-4947\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10217\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10219\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10704\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11507\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11514\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11688\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13545\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13791\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13826\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13829\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14020\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14162\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14200\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14391\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:15980\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16021\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16024\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16101\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16476\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16477\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16505\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16508\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16532\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16534\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16535\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16537\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16542\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16874\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16875\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17084\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18027\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18032\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19133\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19144\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19350\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19353\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19375\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19450\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19550\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19634\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19714\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19715\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19719\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19720\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19721\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19722\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19750\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19839\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20556\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20569\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20570\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20571\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20607\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20608\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20609\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20889\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21017\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21338\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21655\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21769\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21772\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22130\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22141\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22258\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22260\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22268\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22309\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22347\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22415\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22422\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22465\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22485\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22709\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22713\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22840\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22862\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22958\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22959\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22960\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22961\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22962\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23102\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23103\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23244\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23345\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23361\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24337\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24359\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24470\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24478\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24716\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24761\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24762\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24853\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24977\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25089\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25127\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25180\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26447\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26571\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26636\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27076\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28038\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28074\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28196\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28198\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28886\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28961\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29035\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29195\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29455\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29702\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29854\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33722\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34097\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34192\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34196\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34365\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39810\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39894\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41019\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42050\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9385\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-32280\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2456339\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-21T04:51:14+00:00",
"cve": "CVE-2026-32280",
"id": "CVE-2026-32280",
"initial_release_date": "2026-04-08T01:06:58.595000+00:00",
"product_status:fixed": "2600",
"product_status:known_affected": "185",
"product_status:known_not_affected": "2887",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-19T17:40:23Z",
"cve": "CVE-2026-32280",
"id": "CVE-2026-32280",
"initial_release_date": "2026-04-08T23:25:54Z",
"product_status:known_affected": "24",
"product_status:known_not_affected": "95",
"product_status:recommended": "308",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-32280",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-32280.json",
"version": "22"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.1.1-7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"HawtIO HawtIO 4.4.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"operator-container\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"hawtio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.10-6.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.5-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.14-3.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.5-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.5-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.14-3.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.5-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.25.9-3.el10_1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.1-4.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.27-7.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.3.8-5.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.0-4.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-fdo-client\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.1-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-fdo-server\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.1-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"delve\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7:5.8.2-3.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.9-5.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.22.2-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.43.1-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.25.9-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"6:0.8.5-2.el10_0.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.2.2-6.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:10.2.6-24.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.7-4.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.27-3.el10_0.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.3-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.1-2.el10_0.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:134.1-7.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.39.9-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"6:5.4.0-15.el10_0.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.18.1-3.el10_0.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.3.2-4.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.25.2-4.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.4.0-7.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260422204008.a3795dee\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-toolset:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:9.2.10-30.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.1.1-14.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.5-7.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.4.1-10.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260520103055.afee755d\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8060020260515174849.ad008a3a\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8060020260515174849.ad008a3a\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8060020260515174849.ad008a3a\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.25.9-1.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.1-8.el9_7.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"0:3.7.1-4.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.7-7.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"6:5.8.2-3.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.22.2-6.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.43.1-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4:1.4.2-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"runc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.9.0-3.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.33.15-1.el9_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4:4.9.4-20.el9_4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.14.6-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.25.9-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"5:5.4.0-20.el9_6.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.1-2.el9_6.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.1.1-14.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:10.2.6-21.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.39.9-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.6.2-3.el9_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.18.1-5.el9_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:132.2-7.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.7-1.el9_6.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"6:0.8.5-2.el9_6.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.4.0-6.rhaos4.14.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"3:4.4.1-25.rhaos4.14.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.11.3-7.rhaos4.14.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.4.0-6.rhaos4.15.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.11.3-8.rhaos4.15.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.4.0-9.rhaos4.17.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.17.0-202606022046.p2.g144bace.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.17.0-202606171749.p2.g5bcfbfd.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.17.0-202606022046.p2.g8ce997d.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"5:5.2.2-19.rhaos4.17.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4:1.2.9-5.rhaos4.17.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.16.1-6.rhaos4.17.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.4.0-9.rhaos4.18.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"5:5.2.2-12.rhaos4.18.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4:1.2.9-6.rhaos4.18.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.16.1-5.rhaos4.18.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-202606021914.p2.gc395190.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-202606021914.p2.g9c24d76.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-202606021914.p2.g6ea2356.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4:1.2.5-6.rhaos4.19.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.18.1-6.rhaos4.19.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.4.26-9.5.el9ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Services on OpenShift 18.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openstack-k8s-operators-os-diff\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.3-5.el8sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.3-5.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.3-5.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el10em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1:el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781605005\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler 2.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780101239\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781192891\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780051640\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782177012\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780106633\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779991600\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780297056\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782203678\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782207490\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779910504\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779910129\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.4.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779838819\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780320809\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability (NETOBSERV) 1.11.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778508501\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779809598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779808027\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780238563\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/subctl-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-rhel8-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-roxctl-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-v4-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782891812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782891812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-slim-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777976489\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777976489\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-rhel8-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777976489\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-roxctl-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777976489\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-v4-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778755463\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778755463\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-slim-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777391542\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779841292\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777902709\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.0.3-1779996197\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783914276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-registry-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.5.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779828691\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780513840\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780374228\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.28::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.28\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779829736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778056267\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-collector-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778056233\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778056245\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-target-allocator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776435680\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777374598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777320087\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel8-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777319850\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/pilot-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777319773\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/ratelimit-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778191378\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777883393\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777883471\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778149127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778164208\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777884045\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777884022\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778149657\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778164042\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778007597\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778007366\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778150474\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778163909\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778007548\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778007569\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778151060\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778163986\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Services on OpenShift 18.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782140297\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoso-operators/sg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779822261\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.14::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779689392\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780891395\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779204086\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779922205\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779811473\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780399582\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/client-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780423339\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784296203\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780425077\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784247610\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780425080\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784296127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780424928\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784296114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780424829\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784296033\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Service Telemetry Framework 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777452570\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"stf/sg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"packageName\": \"dvo/deployment-validation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"packageName\": \"workload-availability/fence-agents-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"packageName\": \"workload-availability/machine-deletion-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:1\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-agent-base-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/kepler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel7-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp26/3scale-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp26/operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server\", \"packageName\": \"rhaiis/vllm-cpu-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server\", \"packageName\": \"rhaiis/vllm-neuron-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server\", \"packageName\": \"rhaiis/vllm-tpu-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server\", \"packageName\": \"rhaii/vllm-neuron-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:certifications:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Certification Program for Red Hat Enterprise Linux 9\", \"packageName\": \"redhat-certification-preflight\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/coredns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc-worker-script\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-aws-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-azure-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-azure-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-gaudi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-gcp-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"golang1.25\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"golang1.26\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ai-gateway-payload-processing-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-feast-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kf-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-llmisvc-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-router-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kube-auth-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kuberay-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llama-stack-k8s-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-gc-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-processor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-inference-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-routing-sidecar-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-api-server-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-launcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-serving-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhaii-cluster-validator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-spark-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ta-lmes-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-th06-cpu-torch291-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-th06-cuda130-torch291-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trainer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-training-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trustyai-service-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workload-variant-autoscaler-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon-rs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-o\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-tools\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"golang-github-prometheus-promu\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-kuryr\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"cnv4/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-api\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"collectd-libpod-stats\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-builder-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-selinuxd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 3\", \"packageName\": \"golang-github-danielqsj-kafka_exporter\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-04-08T02:01:19.572Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-08T01:06:58.595Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16101: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28886: Red Hat OpenShift Container Platform 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28961: Red Hat OpenShift Container Platform 4.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34097: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21655: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25180: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27076: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14391: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28047: Red Hat OpenStack Platform 17.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23244: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23103: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19715: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16024: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19550: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:18032: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:18027: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17084: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19750: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20570: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22713: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19714: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20571: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19450: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10217: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29195: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23102: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19133: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22141: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19144: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24470: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22130: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29035: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24716: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10704: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16875: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11507: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11514: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:15980: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19634: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20608: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19722: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16021: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20556: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19839: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28038: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22709: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24337: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14200: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10219: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29455: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29703: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19350: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26447: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22309: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29702: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28074: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26571: Compliance Operator 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26636: Custom Metric Autoscaler 2.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25089: HawtIO HawtIO 4.4.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22862: Logging Subsystem for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26585: Logging for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22347: Multicluster Global Hub 1.4.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23345: Multicluster Global Hub 1.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16874: Network Observability (NETOBSERV) 1.11.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29854: OpenShift API for Data Protection 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26568: OpenShift API for Data Protection 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13791: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21338: Red Hat Developer Hub 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13826: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22485: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24977: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24359: Red Hat OpenShift Builds 1.7.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16476: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16477: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16534: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16505: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16532: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16508: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16535: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16537: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16542: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14162: Red Hat OpenShift distributed tracing 3.9.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39894: Red Hat OpenStack Services on OpenShift 18.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21017: Red Hat Quay 3.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24853: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19375: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22465: Red Hat Quay 3.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22840: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23361: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24478: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42043: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22960: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42047: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22958: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22962: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42050: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22959: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42051: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22961: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42049: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21769: Red Hat multicluster global hub 1.5.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14020: Service Telemetry Framework 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28441: mirror registry for Red Hat OpenShift 2.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22268: multicluster engine for Kubernetes 2.11.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22415: multicluster engine for Kubernetes 2.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22422: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28198: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28196: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22258: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22260: multicluster engine for Kubernetes 2.8\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-04-08T01:06:58.595Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-32280\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2456339\", \"name\": \"RHBZ#2456339\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24762\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41019\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16101\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24761\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28886\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28961\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34097\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21655\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25180\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27076\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14391\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23244\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39810\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34365\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20569\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23103\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19715\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16024\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19550\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:18032\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:18027\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17084\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19719\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19750\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20570\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22713\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19714\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20571\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19450\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10217\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29195\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23102\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19133\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22141\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19144\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19135\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24470\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22130\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29035\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24716\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33722\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10704\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16875\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11507\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11514\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:15980\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19634\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34192\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34196\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19721\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20607\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20608\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19722\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16021\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20556\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19839\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28038\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19720\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22709\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17287\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24337\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20609\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14200\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10219\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29455\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19350\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19353\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26447\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22309\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29702\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28074\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26571\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26636\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25089\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22862\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22347\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23345\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16874\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29854\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26568\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25127\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13791\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13829\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20889\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13545\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21338\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13826\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22485\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24977\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24359\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21772\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11688\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16476\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16477\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16534\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16505\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16532\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16508\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16535\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16537\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16542\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14162\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9385\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39894\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21017\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24853\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19375\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22465\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22840\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23361\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24478\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22960\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22958\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22962\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42050\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22959\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42051\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22961\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21769\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14020\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28441\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22268\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22415\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22422\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28198\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28196\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22258\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22260\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-21T12:05:14.608Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-32280\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-08T17:46:14.569488Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"CWE-770 Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-08T17:45:30.925Z\"}}], \"cna\": {\"title\": \"Unexpected work during chain building in crypto/x509\", \"credits\": [{\"lang\": \"en\", \"value\": \"Jakub Ciolek - https://ciolek.dev\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"crypto/x509\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.9\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.2\", \"versionType\": \"semver\"}], \"packageName\": \"crypto/x509\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"Certificate.buildChains\"}, {\"name\": \"Certificate.Verify\"}]}], \"references\": [{\"url\": \"https://go.dev/cl/758320\"}, {\"url\": \"https://go.dev/issue/78282\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-4947\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-770: Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-04-08T01:06:58.595Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-32280\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-21T12:05:14.608Z\", \"dateReserved\": \"2026-03-11T16:38:46.555Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-04-08T01:06:58.595Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:34197
Vulnerability from csaf_redhat - Published: 2026-07-01 12:13 - Updated: 2026-07-21 14:50Summary
Red Hat Security Advisory: skopeo security update
Severity
Important
Notes
Topic: An update for skopeo is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.
Security Fix(es):
* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
35 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for skopeo is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. \n\nSecurity Fix(es):\n\n* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\n* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n\n* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n\n* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:34197",
"url": "https://access.redhat.com/errata/RHSA-2026:34197"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34197.json"
}
],
"title": "Red Hat Security Advisory: skopeo security update",
"tracking": {
"current_release_date": "2026-07-21T14:50:25+00:00",
"generator": {
"date": "2026-07-21T14:50:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:34197",
"initial_release_date": "2026-07-01T12:13:53+00:00",
"revision_history": [
{
"date": "2026-07-01T12:13:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-01T12:13:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T14:50:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.4::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "skopeo-2:1.14.6-1.el9_4.src",
"product": {
"name": "skopeo-2:1.14.6-1.el9_4.src",
"product_id": "skopeo-2:1.14.6-1.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.14.6-1.el9_4?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "skopeo-2:1.14.6-1.el9_4.aarch64",
"product": {
"name": "skopeo-2:1.14.6-1.el9_4.aarch64",
"product_id": "skopeo-2:1.14.6-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.14.6-1.el9_4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"product": {
"name": "skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"product_id": "skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.14.6-1.el9_4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"product": {
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"product_id": "skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.14.6-1.el9_4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"product": {
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"product_id": "skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.14.6-1.el9_4?arch=aarch64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "skopeo-2:1.14.6-1.el9_4.ppc64le",
"product": {
"name": "skopeo-2:1.14.6-1.el9_4.ppc64le",
"product_id": "skopeo-2:1.14.6-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.14.6-1.el9_4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"product": {
"name": "skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"product_id": "skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.14.6-1.el9_4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"product": {
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"product_id": "skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.14.6-1.el9_4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"product": {
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"product_id": "skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.14.6-1.el9_4?arch=ppc64le\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "skopeo-2:1.14.6-1.el9_4.x86_64",
"product": {
"name": "skopeo-2:1.14.6-1.el9_4.x86_64",
"product_id": "skopeo-2:1.14.6-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.14.6-1.el9_4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-2:1.14.6-1.el9_4.x86_64",
"product": {
"name": "skopeo-tests-2:1.14.6-1.el9_4.x86_64",
"product_id": "skopeo-tests-2:1.14.6-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.14.6-1.el9_4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"product": {
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"product_id": "skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.14.6-1.el9_4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"product": {
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"product_id": "skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.14.6-1.el9_4?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "skopeo-2:1.14.6-1.el9_4.s390x",
"product": {
"name": "skopeo-2:1.14.6-1.el9_4.s390x",
"product_id": "skopeo-2:1.14.6-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.14.6-1.el9_4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-2:1.14.6-1.el9_4.s390x",
"product": {
"name": "skopeo-tests-2:1.14.6-1.el9_4.s390x",
"product_id": "skopeo-tests-2:1.14.6-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.14.6-1.el9_4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"product": {
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"product_id": "skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.14.6-1.el9_4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"product": {
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"product_id": "skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.14.6-1.el9_4?arch=s390x\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.14.6-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64"
},
"product_reference": "skopeo-2:1.14.6-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.14.6-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le"
},
"product_reference": "skopeo-2:1.14.6-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.14.6-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x"
},
"product_reference": "skopeo-2:1.14.6-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.14.6-1.el9_4.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src"
},
"product_reference": "skopeo-2:1.14.6-1.el9_4.src",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.14.6-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64"
},
"product_reference": "skopeo-2:1.14.6-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64"
},
"product_reference": "skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le"
},
"product_reference": "skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x"
},
"product_reference": "skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64"
},
"product_reference": "skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64"
},
"product_reference": "skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le"
},
"product_reference": "skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x"
},
"product_reference": "skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-2:1.14.6-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64"
},
"product_reference": "skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.14.6-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64"
},
"product_reference": "skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.14.6-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le"
},
"product_reference": "skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.14.6-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x"
},
"product_reference": "skopeo-tests-2:1.14.6-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.14.6-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
},
"product_reference": "skopeo-tests-2:1.14.6-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T12:13:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T12:13:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T12:13:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T12:13:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:skopeo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debuginfo-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-debugsource-2:1.14.6-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:skopeo-tests-2:1.14.6-1.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:34365
Vulnerability from csaf_redhat - Published: 2026-07-01 17:32 - Updated: 2026-07-21 14:02Summary
Red Hat Security Advisory: Satellite 6.19.2 Async Update
Severity
Important
Notes
Topic: A new release is now available for Red Hat Satellite 6.19 for RHEL 9.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.
Security Fix(es):
* candlepin: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects (CVE-2026-27727)
* yggdrasil-worker-forwarder: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* yggdrasil-worker-forwarder: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
* yggdrasil-worker-forwarder: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* yggdrasil-worker-forwarder: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* yggdrasil-worker-forwarder: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* yggdrasil-worker-forwarder: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* python-pillow: Pillow: Denial of Service via decompression bomb in FITS image processing (CVE-2026-40192)
* python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526)
* foreman: foreman: Cross-tenant private SSH key disclosure via taxonomy scoping bypass (CVE-2026-5142)
* foreman: Foreman: Information disclosure via improper validation of nested request parameters (CVE-2026-5138)
* foreman: Foreman: Privilege escalation to administrator-level access via usergroup role assignment manipulation (CVE-2026-5136)
* foreman: Foreman: Unauthorized modification of host configurations via broken access control (CVE-2026-5135)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nested host attributes, effectively bypassing authorisation checks. The consequence is the potential for unauthorised modification of managed host configurations across different organisational and location boundaries.
6.5 (Medium)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
Known not affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64 | — |
Threats
Impact
Moderate
A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including administrative roles, to a user group and then add themselves as a member. Successful exploitation of this vulnerability leads to full privilege escalation, granting the attacker administrator-level access.
8.8 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
Known not affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64 | — |
Threats
Impact
Important
A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller method does not properly validate organization and location IDs from nested request parameters, bypassing existing authorization checks. This allows the user to leak sensitive infrastructure metadata, including subnet topology, IP ranges, gateways, DNS servers, and VLAN IDs, from organizations and locations they are not authorized to access.
4.3 (Medium)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
Known not affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64 | — |
Threats
Impact
Moderate
A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability leads to cross-tenant data exposure in multi-tenant deployments, potentially compromising sensitive information.
6.5 (Medium)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — |
Vendor Fix
fix
|
Known not affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64 | — |
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
2 products
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in mchange-commons-java, a Java utility library. An attacker can exploit this vulnerability by providing a maliciously crafted `javax.naming.Reference` or serialized object to an application using the library. This can provoke the application to download and execute arbitrary malicious code due to mchange-commons-java's independent implementation of Java Naming and Directory Interface (JNDI) dereferencing, which supports remote code loading. This could lead to arbitrary code execution within the affected application.
8.3 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
2 products
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
2 products
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
2 products
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
2 products
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
2 products
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library's failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src | — |
Vendor Fix
fix
|
Known not affected
56 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64 | — |
Threats
Impact
Important
References
93 references
Acknowledgments
Aisle Research
Stanislav Fot
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new release is now available for Red Hat Satellite 6.19 for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* candlepin: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects (CVE-2026-27727)\n* yggdrasil-worker-forwarder: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n* yggdrasil-worker-forwarder: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n* yggdrasil-worker-forwarder: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n* yggdrasil-worker-forwarder: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n* yggdrasil-worker-forwarder: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n* yggdrasil-worker-forwarder: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n* python-pillow: Pillow: Denial of Service via decompression bomb in FITS image processing (CVE-2026-40192)\n* python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526)\n* foreman: foreman: Cross-tenant private SSH key disclosure via taxonomy scoping bypass (CVE-2026-5142)\n* foreman: Foreman: Information disclosure via improper validation of nested request parameters (CVE-2026-5138)\n* foreman: Foreman: Privilege escalation to administrator-level access via usergroup role assignment manipulation (CVE-2026-5136)\n* foreman: Foreman: Unauthorized modification of host configurations via broken access control (CVE-2026-5135)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:34365",
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "SAT-45957",
"url": "https://issues.redhat.com/browse/SAT-45957"
},
{
"category": "external",
"summary": "SAT-46096",
"url": "https://issues.redhat.com/browse/SAT-46096"
},
{
"category": "external",
"summary": "SAT-46097",
"url": "https://issues.redhat.com/browse/SAT-46097"
},
{
"category": "external",
"summary": "SAT-46098",
"url": "https://issues.redhat.com/browse/SAT-46098"
},
{
"category": "external",
"summary": "SAT-46101",
"url": "https://issues.redhat.com/browse/SAT-46101"
},
{
"category": "external",
"summary": "SAT-46102",
"url": "https://issues.redhat.com/browse/SAT-46102"
},
{
"category": "external",
"summary": "SAT-46103",
"url": "https://issues.redhat.com/browse/SAT-46103"
},
{
"category": "external",
"summary": "SAT-46106",
"url": "https://issues.redhat.com/browse/SAT-46106"
},
{
"category": "external",
"summary": "SAT-46107",
"url": "https://issues.redhat.com/browse/SAT-46107"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34365.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.19.2 Async Update",
"tracking": {
"current_release_date": "2026-07-21T14:02:20+00:00",
"generator": {
"date": "2026-07-21T14:02:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:34365",
"initial_release_date": "2026-07-01T17:32:19+00:00",
"revision_history": [
{
"date": "2026-07-01T17:32:19+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-08T19:41:10+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T14:02:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.19::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.19::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.19::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-maintenance",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_maintenance:6.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-0:3.18.0.7-1.el9sat.src",
"product": {
"name": "foreman-0:3.18.0.7-1.el9sat.src",
"product_id": "foreman-0:3.18.0.7-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.18.0.7-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "candlepin-0:4.7.5-1.el9sat.src",
"product": {
"name": "candlepin-0:4.7.5-1.el9sat.src",
"product_id": "candlepin-0:4.7.5-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin@4.7.5-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-0:12.2.0-1.el9pc.src",
"product": {
"name": "python3.12-pillow-0:12.2.0-1.el9pc.src",
"product_id": "python3.12-pillow-0:12.2.0-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.2.0-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"product": {
"name": "python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"product_id": "python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.26.16-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"product": {
"name": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"product_id": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_maintain@1.14.5-1.el9sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.20.0.5-1.el9sat.src",
"product": {
"name": "rubygem-katello-0:4.20.0.5-1.el9sat.src",
"product_id": "rubygem-katello-0:4.20.0.5-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.20.0.5-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.19.2-1.el9sat.src",
"product": {
"name": "satellite-0:6.19.2-1.el9sat.src",
"product_id": "satellite-0:6.19.2-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.19.2-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"product": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"product_id": "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-5.el9sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-pcp@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-redis@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-service-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-service-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"product": {
"name": "foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"product_id": "foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@3.18.0.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "candlepin-0:4.7.5-1.el9sat.noarch",
"product": {
"name": "candlepin-0:4.7.5-1.el9sat.noarch",
"product_id": "candlepin-0:4.7.5-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin@4.7.5-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"product": {
"name": "candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"product_id": "candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin-selinux@4.7.5-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"product": {
"name": "python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"product_id": "python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.26.16-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"product": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"product_id": "python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt%2Bcrypto@2.13.0-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"product": {
"name": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"product_id": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_maintain@1.14.5-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"product": {
"name": "rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"product_id": "rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.20.0.5-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.19.2-1.el9sat.noarch",
"product": {
"name": "satellite-capsule-0:6.19.2-1.el9sat.noarch",
"product_id": "satellite-capsule-0:6.19.2-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.19.2-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.19.2-1.el9sat.noarch",
"product": {
"name": "satellite-common-0:6.19.2-1.el9sat.noarch",
"product_id": "satellite-common-0:6.19.2-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.19.2-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"product": {
"name": "satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"product_id": "satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-obsolete-packages@6.19.2-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.19.2-1.el9sat.noarch",
"product": {
"name": "satellite-0:6.19.2-1.el9sat.noarch",
"product_id": "satellite-0:6.19.2-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.19.2-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.19.2-1.el9sat.noarch",
"product": {
"name": "satellite-cli-0:6.19.2-1.el9sat.noarch",
"product_id": "satellite-cli-0:6.19.2-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.19.2-1.el9sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"product": {
"name": "python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"product_id": "python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.2.0-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"product": {
"name": "python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"product_id": "python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debugsource@12.2.0-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"product": {
"name": "python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"product_id": "python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debuginfo@12.2.0-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64",
"product": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64",
"product_id": "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-5.el9sat?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.18.0.7-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src"
},
"product_reference": "foreman-0:3.18.0.7-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.2.0-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src"
},
"product_reference": "python3.12-pillow-0:12.2.0-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.26.16-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.26.16-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src"
},
"product_reference": "python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch"
},
"product_reference": "python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src"
},
"product_reference": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.19.2-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src"
},
"product_reference": "satellite-0:6.19.2-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.19.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.19.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.19.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.19.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src"
},
"product_reference": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.18.0.7-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src"
},
"product_reference": "foreman-0:3.18.0.7-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.19.2-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src"
},
"product_reference": "satellite-0:6.19.2-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.19.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.19.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-0:4.7.5-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch"
},
"product_reference": "candlepin-0:4.7.5-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-0:4.7.5-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src"
},
"product_reference": "candlepin-0:4.7.5-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-selinux-0:4.7.5-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch"
},
"product_reference": "candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.18.0.7-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src"
},
"product_reference": "foreman-0:3.18.0.7-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.18.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.2.0-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src"
},
"product_reference": "python3.12-pillow-0:12.2.0-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.26.16-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.26.16-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src"
},
"product_reference": "python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch"
},
"product_reference": "python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src"
},
"product_reference": "rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.20.0.5-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch"
},
"product_reference": "rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.20.0.5-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src"
},
"product_reference": "rubygem-katello-0:4.20.0.5-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.19.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch"
},
"product_reference": "satellite-0:6.19.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.19.2-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src"
},
"product_reference": "satellite-0:6.19.2-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.19.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.19.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.19.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.19.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src"
},
"product_reference": "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
},
"product_reference": "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Stanislav Fot"
],
"organization": "Aisle Research"
}
],
"cve": "CVE-2026-5135",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"discovery_date": "2026-03-27T13:22:30.704000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452230"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nested host attributes, effectively bypassing authorisation checks. The consequence is the potential for unauthorised modification of managed host configurations across different organisational and location boundaries.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "foreman: Foreman: Unauthorized modification of host configurations via broken access control",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5135"
},
{
"category": "external",
"summary": "RHBZ#2452230",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452230"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5135"
}
],
"release_date": "2026-04-15T12:34:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "foreman: Foreman: Unauthorized modification of host configurations via broken access control"
},
{
"acknowledgments": [
{
"names": [
"Stanislav Fot"
],
"organization": "Aisle Research"
}
],
"cve": "CVE-2026-5136",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-03-30T10:41:48.559000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452970"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user\u0027s permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including administrative roles, to a user group and then add themselves as a member. Successful exploitation of this vulnerability leads to full privilege escalation, granting the attacker administrator-level access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "foreman: Foreman: Privilege escalation to administrator-level access via usergroup role assignment manipulation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5136"
},
{
"category": "external",
"summary": "RHBZ#2452970",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452970"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5136"
}
],
"release_date": "2026-07-01T12:28:21.744000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "foreman: Foreman: Privilege escalation to administrator-level access via usergroup role assignment manipulation"
},
{
"acknowledgments": [
{
"names": [
"Stanislav Fot"
],
"organization": "Aisle Research"
}
],
"cve": "CVE-2026-5138",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"discovery_date": "2026-03-30T10:51:04.461000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452971"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller method does not properly validate organization and location IDs from nested request parameters, bypassing existing authorization checks. This allows the user to leak sensitive infrastructure metadata, including subnet topology, IP ranges, gateways, DNS servers, and VLAN IDs, from organizations and locations they are not authorized to access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "foreman: Foreman: Information disclosure via improper validation of nested request parameters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5138"
},
{
"category": "external",
"summary": "RHBZ#2452971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5138",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5138"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5138",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5138"
}
],
"release_date": "2026-07-01T12:29:33.423000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "foreman: Foreman: Information disclosure via improper validation of nested request parameters"
},
{
"acknowledgments": [
{
"names": [
"Stanislav Fot"
],
"organization": "Aisle Research"
}
],
"cve": "CVE-2026-5142",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"discovery_date": "2026-03-30T12:04:45.283000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452999"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in foreman. Authenticated users with \u0027view_keypairs\u0027 permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability leads to cross-tenant data exposure in multi-tenant deployments, potentially compromising sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "foreman: foreman: Cross-tenant private SSH key disclosure via taxonomy scoping bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5142"
},
{
"category": "external",
"summary": "RHBZ#2452999",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452999"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5142",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5142"
}
],
"release_date": "2026-04-30T12:34:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "foreman: foreman: Cross-tenant private SSH key disclosure via taxonomy scoping bypass"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27727",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-02-25T17:04:31.254239+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442671"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in mchange-commons-java, a Java utility library. An attacker can exploit this vulnerability by providing a maliciously crafted `javax.naming.Reference` or serialized object to an application using the library. This can provoke the application to download and execute arbitrary malicious code due to mchange-commons-java\u0027s independent implementation of Java Naming and Directory Interface (JNDI) dereferencing, which supports remote code loading. This could lead to arbitrary code execution within the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27727"
},
{
"category": "external",
"summary": "RHBZ#2442671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27727",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27727"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27727",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27727"
},
{
"category": "external",
"summary": "https://github.com/swaldman/mchange-commons-java/security/advisories/GHSA-m2cm-222f-qw44",
"url": "https://github.com/swaldman/mchange-commons-java/security/advisories/GHSA-m2cm-222f-qw44"
},
{
"category": "external",
"summary": "https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal",
"url": "https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal"
},
{
"category": "external",
"summary": "https://www.mchange.com/projects/c3p0/#configuring_security",
"url": "https://www.mchange.com/projects/c3p0/#configuring_security"
},
{
"category": "external",
"summary": "https://www.mchange.com/projects/c3p0/#security-note",
"url": "https://www.mchange.com/projects/c3p0/#security-note"
}
],
"release_date": "2026-02-25T16:01:04.187000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-40192",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-04-16T00:00:49.590876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458856"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library\u0027s failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40192"
},
{
"category": "external",
"summary": "RHBZ#2458856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40192"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628",
"url": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9521",
"url": "https://github.com/python-pillow/Pillow/pull/9521"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j"
},
{
"category": "external",
"summary": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb",
"url": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb"
}
],
"release_date": "2026-04-15T22:53:56.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T17:32:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:candlepin-0:4.7.5-1.el9sat.src",
"9Base-satellite-6.19:candlepin-selinux-0:4.7.5-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.7-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.7-1.el9sat.noarch",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pillow-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pillow-debugsource-0:12.2.0-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulp-container-0:2.26.16-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pyjwt+crypto-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pyjwt-0:2.13.0-1.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_maintain-1:1.14.5-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.5-1.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.2-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.2-1.el9sat.noarch",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src",
"9Base-satellite-6.19:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
}
]
}
RHSA-2026:36319
Vulnerability from csaf_redhat - Published: 2026-07-07 15:06 - Updated: 2026-07-21 14:50Summary
Red Hat Security Advisory: RHACS 4.9.9 security and bug fix update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.
Details: See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x | — |
Workaround
|
Threats
Impact
Important
References
146 references
Acknowledgments
Red Hat
Moritz Clasmeier
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
"title": "Topic"
},
{
"category": "general",
"text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36319",
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9165",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-499_release-notes-49",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.9/html-single/release_notes/index#about-this-release-499_release-notes-49"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36319.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.9.9 security and bug fix update",
"tracking": {
"current_release_date": "2026-07-21T14:50:28+00:00",
"generator": {
"date": "2026-07-21T14:50:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:36319",
"initial_release_date": "2026-07-07T15:06:01+00:00",
"revision_history": [
{
"date": "2026-07-07T15:06:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T14:50:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Security 4.9",
"product": {
"name": "Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Ace31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Ac11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256%3A8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Ad58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Ad055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Ac8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Aaa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Ad68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Aa2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aa0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Ab48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Aa757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Afbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Aef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8\u0026tag=1782290046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Aac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Aedd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Aac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8\u0026tag=1782891812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Abff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8\u0026tag=1783357116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8\u0026tag=1783357116"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64 as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x as a component of Red Hat Advanced Cluster Security 4.9",
"product_id": "Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.9"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Moritz Clasmeier"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-9165",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-05-21T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated GraphQL API. An authenticated user with a valid API token can send deeply nested queries that cause excessive resource consumption in Central, resulting in a denial of service for the management plane.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security is aware of this issue affecting RHACS Central. This flaw allows an authenticated user to reduce availability of the Central management component. Red Hat is not aware of malicious exploitation of this issue outside of coordinated testing. Updates addressing this issue will be released according to the RHACS support lifecycle. Refer to the associated errata when available for affected versions and update instructions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9165"
},
{
"category": "external",
"summary": "RHBZ#2480505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9165",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9165"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9165"
}
],
"release_date": "2026-07-06T08:38:30.568000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "There is no complete mitigation other than installing the update once\navailable.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "stackrox: stackrox: Unbounded GraphQL query depth allows authenticated denial of service"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T15:06:01+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:6204d3577ee741f812133ff2d88499c807aa3ad58432f3304c1a35fc112189fd_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:d68367f3f9e3e785b7cfbd1d03e7c9ddbf8aed846fd7ff2d0ac03413c63e51e1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:fbc7d9fa8d47d71146098bdbcf2932684466d48df2a9e71eb19e3bbe185eaa3c_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:13b23d3626a7c286bc04db231b9c826914c03c4c7a8bebf031d973ac03a8fc31_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:7d8340d149a12f7340ba43a87d6df208eb607a0f579b25efd1360bbe3aafb2e5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ce31d01779b4a6e31d3ccc4aa50da2d5c5c40e01ed9d40327da6c41c0a486a2b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:ef34f9f1927d68839bf1433f6a2c4753edbaa7bc1df54ac491643a4687aac2bf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a757f885d03f92b46077f763a2e3695428efca08d1d170a850f6f35112f66416_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:ac4aeacd669e6acd8b6513ed2e2d7bf065c7dc5e7b94ad4fa6287babab054d14_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:c11dd07b70d80f5705d62fdf5a0df3b20ef5bc124ed0ebb17d63e475a3970635_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:8580ba5ee1456d0def514182dbcd5b9d131e82c9e79a51ef1a44002891b1b3a0_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2f654cd657b76268e96f48c805d98b6a01193d5472e3b770d8e76d79b5c05f3f_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:934b313047a61e8f78e1a8b17083c4b5ad85f658f1314993e36710ae5e525595_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:96c38c3f664be6d572f4c267861008387d72e4a51e9d3f6eb9c90dab0ff3dbdc_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:a2a01dc772b7343f80be6f0df86143abbbddac487d39ff9dca91248879cfae3c_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4333f349152fd58df6e05ebe890c360bea2cf6d09c38b51cc4b0628132f85438_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:a0d6f0dba57d06ba8d1ba7e5527fac907ecfcabab5ed1df0af3e664f5f831709_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d58d334c4ac8b3ec12c25dda7bc0c54aa463f5c6ad072d019deb4bef0e4e0388_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:edd5d70d99d538af0d2e4e8af795670f9bf75db5f33d5916d8fe2338ad783f69_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3d1ad6886063f535a79ac17e37aa000255d7e609e964256e90a7105393f99524_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9b22d40703ae9073ce13aa8b50a2cac2976ec7641977a8a7b8c3a0c5b4c89e69_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:9df1184a0d86761b2f9fe173a446da819c89b95fd4e7759fc13b8f6fd6d563b1_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac2c3fa4bb41c9f5e6d6f8cc400a250206923a3d74d72c52d7c30664baabcaaf_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:597c40e984b4e6c8b39fd07e95116b33050c0119c8064e84ab32966db2b4c28f_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:6030687a0992fe6c2bf15e4455aa0601061423fb20a0153b753712ec4c8b6b8e_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8fee28cec9066005086a5e9d2b77ec5b351463dd268f5a09176ee0b47ba7c09d_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c8aa39c7c288e4ad2813b2cea30826c99c3e8e25cc1d43b9d3e5b5a95a663d56_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:08140a22a837cad3ce68d2e3f5cb07b103583befa64e4a1f90d348a67dd5e661_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:79603118166a758104b5e29d90b0d08a25c7797b7e10a0a0a7588325fe5a8796_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:b48725f67d160b2d277f65b7f9d84bea0477ade659a4739616d68139f60799d5_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:d055d3d7d21c787ff41fce7ed08ee1185962be6f222469a85cce0c45c8375f46_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:0d114307f2e9c510e898c8d793d3e4c18d7d4ca38a6487a669e93c1880b500ae_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:3c4b50e375c8fabf7a259cc99cae49cddb2d46e671536975cee344e8d1880334_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:4e24c3568384f62a6efefe5a97e3844c11530eb542131ad1ce6eec0aef236129_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:6e9d49feda9a820d4de114e859a327c2ed1798fb16f12a17832d890ff62eab80_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:47ed3feae50625198753e8b325cd1d9906b54446f731311004cba122113e3595_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:48b11cd33e443dc69a7d0d20d0119320b54d09bd47b54a4dda4a749c55ea9900_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:6dcefd3e870252fd6c4589113af0880cd5df8644738ff558c8f3c89ef81563ec_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8d32e8630408d08ac608edf7c5f3b11fea114bbda3ab0dd9a6360cdb2b6b1931_s390x",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:0d7e7363ef60f1953fb01ffecdb40aa55b8bdef0ead60c7b1c76c2cae34749c7_ppc64le",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:865043d3b398721e1c82b798ee334418438f8ede5b6166517b76fb731aae2a59_arm64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:aa5725b9a86e24ff3bd64a454f957b46be14d5adfd148a6927e5d7613ef7c64b_amd64",
"Red Hat Advanced Cluster Security 4.9:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:bff84375341986d6c7c404dca01c5e1305daf9c7e01a2b13ba416487160fe841_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
}
]
}
RHSA-2026:36651
Vulnerability from csaf_redhat - Published: 2026-07-08 10:08 - Updated: 2026-07-21 14:50Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.0.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
* Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Moderate
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 | — |
Workaround
|
Threats
Impact
Important
References
204 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.0.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36651",
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32141",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36651.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update",
"tracking": {
"current_release_date": "2026-07-21T14:50:33+00:00",
"generator": {
"date": "2026-07-21T14:50:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:36651",
"initial_release_date": "2026-07-08T10:08:44+00:00",
"revision_history": [
{
"date": "2026-07-08T10:08:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T14:50:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Edge Manager 1.0",
"product": {
"name": "Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3A7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1783502022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3A9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1783502465"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel9@sha256%3A5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1783502025"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3A3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1783502494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3A0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1783502401"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3A6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1783502403"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3Ab0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1783502022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3A51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1783502023"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel9@sha256%3Af1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel9\u0026tag=1783502438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3A5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1783502765"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3Aceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1783502029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1783502445"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3Abb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1783502022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3Ae4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1783502465"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel9@sha256%3Afb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1783502025"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3Ac9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1783502494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3A84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1783502401"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3A225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1783502403"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3A0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1783502022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3Aaba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1783502023"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel9@sha256%3Ae75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel9\u0026tag=1783502438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3Ae8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1783502765"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3A636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1783502029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1783502445"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64 as a component of Red Hat Edge Manager 1.0",
"product_id": "Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32141",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T19:01:30.987208+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447083"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the flatted npm library. flatted\u0027s parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "RHBZ#2447083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606",
"url": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/pull/88",
"url": "https://github.com/WebReflection/flatted/pull/88"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"
}
],
"release_date": "2026-03-12T18:08:09.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T10:08:44+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:7e7958da7226d0bb3b19bc1447e8545d7d96988d0bde589fbdd649e011586a95_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:bb489e9db92d4fb9715575d079cb8ac8500efc1a53b232c08891ef0c1352a8e7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:9280560b3774698fbd30a1e3a14e6b57f42609bc24bbe8b025a629450b0a7927_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e4c9707494658435871f50c35a690d8cc4d01bf1325dc6ca9379cd40a302644a_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:5f754d14e660f29e18748a47cf56e3c18f656472cd93b6aff939b998f058f89d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:fb4fb7684ce126b8469959ed878b3a7a91884c356c9f6bfac99bd4b2f23ce6a2_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:3a7cfaa9f3b0900827022d18f529f211361e6ba372eb8458035c4e4f0e3ae607_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:c9aa3e4437c767e9a08731b395626b8d69ba466c7f0f1eb6245b9c19ce83e908_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:0b775738a61fe65ffbe59629fe7451eb02b1cf1c40740e5c30a33f0ff0eede2d_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:84f67cafc98159f1308a6e35dbd4290e7cc2d946d078e98e3900d78e3eb3ccf7_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:225a7daaaaf072c45225ae3f4ee793c48dd82f62334d8213872b3b022c30d44e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:6d9c18658ff3931e918eab69039751b48922c77b8c47605a6ce240bce9982568_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:0ee30ee155ff08f2a637ad7a51cb05c587761ba91ad0c261df2100b622ba509b_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b0c0550b7f3d58517cb14220f5735694ac0a581335d0197645bdcb5ad4011a81_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:51ddafb4b356eb322c05191e18b9e7e8734eb90fefc9e79f3f50310fcefc1d7f_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:aba941ba3f928360a744e26745f34962f6ecf3d211b37d4b50bee68803c370ca_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:5f14b823c53919e94d6b57a5a681008a6bc0ba6ee3fd74e744c792c6df11baad_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:e8480249816c12331f27b87d9edb1b15fb8efb8cc8b86bda38750cde3e05a60e_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:e75051d27fae381533a2fb8e8a5dd3e68700dbfea20c50f4d580705bed6e5cf8_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f1e785adb22e3d3c869eabe31f5009f8f8a928e4ad9b553a4bf254476e233e70_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:636c2b9fe1b410168f9f5b8956255ef0eb6b0fd2b9247fb020ec9b50df5e5321_arm64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:ceb10edf040f4d60df9307758ff49f212bf950f93db6ae04d92d686d372ba8bb_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:11bd15489ac98c413d610197422b504fa0fb4478f2d838b91de35e3b9380de79_amd64",
"Red Hat Edge Manager 1.0:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:4ae2d884d5b5d7caf876bbb2118b715ae632e5c4dad3d19edd15ec935e588395_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:36796
Vulnerability from csaf_redhat - Published: 2026-07-08 15:52 - Updated: 2026-07-21 14:50Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.0.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Security fixes:
* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)
* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)
* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)
* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)
* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)
* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)
* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
8.3 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
References
190 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.0.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\nRed Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\nRed Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.\n\nSecurity fixes:\n\n* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)\n* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)\n* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n* Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)\n* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)\n* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)\n* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)\n* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)\n* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36796",
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36796.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update",
"tracking": {
"current_release_date": "2026-07-21T14:50:35+00:00",
"generator": {
"date": "2026-07-21T14:50:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:36796",
"initial_release_date": "2026-07-08T15:52:29+00:00",
"revision_history": [
{
"date": "2026-07-08T15:52:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-08T15:52:29+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T14:50:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEM 1.0 for RHEL 9",
"product": {
"name": "RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-0:1.0.3-1.el9em.src",
"product": {
"name": "flightctl-0:1.0.3-1.el9em.src",
"product_id": "flightctl-0:1.0.3-1.el9em.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.0.3-1.el9em?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.0.3-1.el9em.x86_64",
"product": {
"name": "flightctl-agent-0:1.0.3-1.el9em.x86_64",
"product_id": "flightctl-agent-0:1.0.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.0.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.0.3-1.el9em.x86_64",
"product": {
"name": "flightctl-cli-0:1.0.3-1.el9em.x86_64",
"product_id": "flightctl-cli-0:1.0.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.0.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.0.3-1.el9em.x86_64",
"product": {
"name": "flightctl-observability-0:1.0.3-1.el9em.x86_64",
"product_id": "flightctl-observability-0:1.0.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.0.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.0.3-1.el9em.x86_64",
"product": {
"name": "flightctl-services-0:1.0.3-1.el9em.x86_64",
"product_id": "flightctl-services-0:1.0.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.0.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64",
"product": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64",
"product_id": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-telemetry-gateway@1.0.3-1.el9em?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.0.3-1.el9em.s390x",
"product": {
"name": "flightctl-agent-0:1.0.3-1.el9em.s390x",
"product_id": "flightctl-agent-0:1.0.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.0.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.0.3-1.el9em.s390x",
"product": {
"name": "flightctl-cli-0:1.0.3-1.el9em.s390x",
"product_id": "flightctl-cli-0:1.0.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.0.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.0.3-1.el9em.s390x",
"product": {
"name": "flightctl-observability-0:1.0.3-1.el9em.s390x",
"product_id": "flightctl-observability-0:1.0.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.0.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.0.3-1.el9em.s390x",
"product": {
"name": "flightctl-services-0:1.0.3-1.el9em.s390x",
"product_id": "flightctl-services-0:1.0.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.0.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"product": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"product_id": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-telemetry-gateway@1.0.3-1.el9em?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"product_id": "flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.0.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"product_id": "flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.0.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"product_id": "flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.0.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.0.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-services-0:1.0.3-1.el9em.ppc64le",
"product_id": "flightctl-services-0:1.0.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.0.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"product_id": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-telemetry-gateway@1.0.3-1.el9em?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.0.3-1.el9em.aarch64",
"product": {
"name": "flightctl-agent-0:1.0.3-1.el9em.aarch64",
"product_id": "flightctl-agent-0:1.0.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.0.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.0.3-1.el9em.aarch64",
"product": {
"name": "flightctl-cli-0:1.0.3-1.el9em.aarch64",
"product_id": "flightctl-cli-0:1.0.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.0.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.0.3-1.el9em.aarch64",
"product": {
"name": "flightctl-observability-0:1.0.3-1.el9em.aarch64",
"product_id": "flightctl-observability-0:1.0.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.0.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.0.3-1.el9em.aarch64",
"product": {
"name": "flightctl-services-0:1.0.3-1.el9em.aarch64",
"product_id": "flightctl-services-0:1.0.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.0.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"product": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"product_id": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-telemetry-gateway@1.0.3-1.el9em?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-selinux-0:1.0.3-1.el9em.noarch",
"product": {
"name": "flightctl-selinux-0:1.0.3-1.el9em.noarch",
"product_id": "flightctl-selinux-0:1.0.3-1.el9em.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.0.3-1.el9em?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.0.3-1.el9em.src as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src"
},
"product_reference": "flightctl-0:1.0.3-1.el9em.src",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.0.3-1.el9em.aarch64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64"
},
"product_reference": "flightctl-agent-0:1.0.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.0.3-1.el9em.ppc64le as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.0.3-1.el9em.s390x as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x"
},
"product_reference": "flightctl-agent-0:1.0.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.0.3-1.el9em.x86_64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64"
},
"product_reference": "flightctl-agent-0:1.0.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.0.3-1.el9em.aarch64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64"
},
"product_reference": "flightctl-cli-0:1.0.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.0.3-1.el9em.ppc64le as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.0.3-1.el9em.s390x as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x"
},
"product_reference": "flightctl-cli-0:1.0.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.0.3-1.el9em.x86_64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64"
},
"product_reference": "flightctl-cli-0:1.0.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.0.3-1.el9em.aarch64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64"
},
"product_reference": "flightctl-observability-0:1.0.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.0.3-1.el9em.ppc64le as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.0.3-1.el9em.s390x as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x"
},
"product_reference": "flightctl-observability-0:1.0.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.0.3-1.el9em.x86_64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64"
},
"product_reference": "flightctl-observability-0:1.0.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.0.3-1.el9em.noarch as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
},
"product_reference": "flightctl-selinux-0:1.0.3-1.el9em.noarch",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.0.3-1.el9em.aarch64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64"
},
"product_reference": "flightctl-services-0:1.0.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.0.3-1.el9em.ppc64le as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-services-0:1.0.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.0.3-1.el9em.s390x as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x"
},
"product_reference": "flightctl-services-0:1.0.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.0.3-1.el9em.x86_64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64"
},
"product_reference": "flightctl-services-0:1.0.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64"
},
"product_reference": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x"
},
"product_reference": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
},
"product_reference": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:25.130006+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "RHBZ#2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4771",
"url": "https://pkg.go.dev/vuln/GO-2026-4771"
}
],
"release_date": "2026-04-07T15:19:24.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:39810
Vulnerability from csaf_redhat - Published: 2026-07-15 09:55 - Updated: 2026-07-21 13:31Summary
Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update
Severity
Important
Notes
Topic: An update for golang-github-openstack-k8s-operators-os-diff is now
available for Red Hat OpenStack Services on OpenShift 18.0 (Antelope).
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Security Fix(es):
* net/url: Memory exhaustion in query parameter parsing in net/url
(CVE-2025-61726)
* golang: Denial of Service due to excessive resource consumption via
crafted certificate (CVE-2025-61729)
* Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* Incorrect enforcement of email constraints in crypto/x509
(CVE-2026-27137)
* crypto/tls: golang: Go: Denial of Service vulnerability in certificate
chain building (CVE-2026-32280)
* golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update
messages (CVE-2026-32283)
* golang: Go crypto/x509: Certificate validation bypass due to incorrect
DNS constraint application (CVE-2026-33810)
* golang: Go net package: Denial of Service via long CNAME response in
LookupCNAME (CVE-2026-33811)
* golang: Go crypto/x509: Denial of Service via inefficient certificate
chain validation (CVE-2026-32281)
* internal/syscall/unix: Root.Chmod can follow symlinks out of the root
(CVE-2026-32282)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
88 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for golang-github-openstack-k8s-operators-os-diff is now\navailable for Red Hat OpenStack Services on OpenShift 18.0 (Antelope).\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Security Fix(es):\n\n* net/url: Memory exhaustion in query parameter parsing in net/url\n(CVE-2025-61726)\n\n* golang: Denial of Service due to excessive resource consumption via\ncrafted certificate (CVE-2025-61729)\n\n* Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* Incorrect enforcement of email constraints in crypto/x509\n(CVE-2026-27137)\n\n* crypto/tls: golang: Go: Denial of Service vulnerability in certificate\nchain building (CVE-2026-32280)\n\n* golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update\nmessages (CVE-2026-32283)\n\n* golang: Go crypto/x509: Certificate validation bypass due to incorrect\nDNS constraint application (CVE-2026-33810)\n\n* golang: Go net package: Denial of Service via long CNAME response in\nLookupCNAME (CVE-2026-33811)\n\n* golang: Go crypto/x509: Denial of Service via inefficient certificate\nchain validation (CVE-2026-32281)\n\n* internal/syscall/unix: Root.Chmod can follow symlinks out of the root\n(CVE-2026-32282)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:39810",
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39810.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update",
"tracking": {
"current_release_date": "2026-07-21T13:31:50+00:00",
"generator": {
"date": "2026-07-21T13:31:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:39810",
"initial_release_date": "2026-07-15T09:55:31+00:00",
"revision_history": [
{
"date": "2026-07-15T09:55:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-15T09:55:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T13:31:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Services on OpenShift 18.0",
"product": {
"name": "Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "9Base-RHOSO-18.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:18.0::el9"
}
}
},
{
"category": "product_name",
"name": "9Base-RHOSO-TOOLS-18",
"product": {
"name": "9Base-RHOSO-TOOLS-18",
"product_id": "9Base-RHOSO-TOOLS-18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:18.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Services on OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"product": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"product_id": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openstack-k8s-operators-os-diff@0.1.1-18.0.20260602234716.a95ae05.el9ost?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"product": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"product_id": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openstack-k8s-operators-os-diff@0.1.1-18.0.20260602234716.a95ae05.el9ost?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src"
},
"product_reference": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"relates_to_product_reference": "9Base-RHOSO-18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
},
"product_reference": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"relates_to_product_reference": "9Base-RHOSO-18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src as a component of 9Base-RHOSO-TOOLS-18",
"product_id": "9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src"
},
"product_reference": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"relates_to_product_reference": "9Base-RHOSO-TOOLS-18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 as a component of 9Base-RHOSO-TOOLS-18",
"product_id": "9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
},
"product_reference": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"relates_to_product_reference": "9Base-RHOSO-TOOLS-18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
}
]
}
RHSA-2026:39894
Vulnerability from csaf_redhat - Published: 2026-07-15 11:15 - Updated: 2026-07-21 10:06Summary
Red Hat Security Advisory: Release of containers for RHOSO 18.0.21
Severity
Important
Notes
Topic: Red Hat OpenStack Services on OpenShift (RHOSO) 18.0.21 containers are now available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenStack Services on OpenShift is a hybrid cloud solution for deploying and managing virtualized and containerized applications in a scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP) control plane.
Security Fix(es):
* opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)
* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
129 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64 | — |
Vendor Fix
fix
|
Known not affected
129 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64 | — |
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64 | — |
Vendor Fix
fix
|
Known not affected
129 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64 | — |
Threats
Impact
Important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenStack Services on OpenShift (RHOSO) 18.0.21 containers are now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenStack Services on OpenShift is a hybrid cloud solution for deploying and managing virtualized and containerized applications in a scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP) control plane.\n\nSecurity Fix(es):\n * opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)\n * Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n * pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)\n\n For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:39894",
"url": "https://access.redhat.com/errata/RHSA-2026:39894"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/software/containers/search",
"url": "https://catalog.redhat.com/software/containers/search"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39894.json"
}
],
"title": "Red Hat Security Advisory: Release of containers for RHOSO 18.0.21",
"tracking": {
"current_release_date": "2026-07-21T10:06:40+00:00",
"generator": {
"date": "2026-07-21T10:06:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:39894",
"initial_release_date": "2026-07-15T11:15:05+00:00",
"revision_history": [
{
"date": "2026-07-15T11:15:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T10:06:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Services on OpenShift 18.0",
"product": {
"name": "Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:18.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Services on OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"product_id": "registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/barbican-rhel9-operator@sha256%3Aa7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/barbican-rhel9-operator\u0026tag=1782387894"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"product_id": "registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cinder-rhel9-operator@sha256%3A28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/cinder-rhel9-operator\u0026tag=1782393995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"product_id": "registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"product_identification_helper": {
"purl": "pkg:oci/designate-rhel9-operator@sha256%3A97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/designate-rhel9-operator\u0026tag=1782387889"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"product": {
"name": "registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"product_id": "registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/edpm-hardened-uefi-rhel9@sha256%3A77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9\u0026tag=1782825614"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"product_id": "registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/glance-rhel9-operator@sha256%3A766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/glance-rhel9-operator\u0026tag=1782393995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"product_id": "registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/heat-rhel9-operator@sha256%3Af19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/heat-rhel9-operator\u0026tag=1782387606"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"product_id": "registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"product_identification_helper": {
"purl": "pkg:oci/horizon-rhel9-operator@sha256%3A5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/horizon-rhel9-operator\u0026tag=1782388003"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"product_id": "registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/infra-rhel9-operator@sha256%3A49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/infra-rhel9-operator\u0026tag=1783069974"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"product_id": "registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ironic-rhel9-operator@sha256%3A2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/ironic-rhel9-operator\u0026tag=1782395847"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"product": {
"name": "registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"product_id": "registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ironic-python-agent-rhel9@sha256%3A25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/ironic-python-agent-rhel9\u0026tag=1782750423"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"product_id": "registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/keystone-rhel9-operator@sha256%3A5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/keystone-rhel9-operator\u0026tag=1782395761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"product_id": "registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/manila-rhel9-operator@sha256%3Abec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/manila-rhel9-operator\u0026tag=1782387872"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"product_id": "registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mariadb-rhel9-operator@sha256%3Abd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/mariadb-rhel9-operator\u0026tag=1783346658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"product_id": "registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mysqld-exporter-rhel9@sha256%3A2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9\u0026tag=1782140307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"product_id": "registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"product_identification_helper": {
"purl": "pkg:oci/neutron-rhel9-operator@sha256%3A6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/neutron-rhel9-operator\u0026tag=1782387826"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"product_id": "registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/nova-rhel9-operator@sha256%3A011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/nova-rhel9-operator\u0026tag=1782387726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"product": {
"name": "registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"product_id": "registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/octavia-amphora-image-rhel9@sha256%3Adac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/octavia-amphora-image-rhel9\u0026tag=1782751186"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"product_id": "registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/octavia-rhel9-operator@sha256%3A2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/octavia-rhel9-operator\u0026tag=1782484158"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"product_id": "registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ee-openstack-ansible-ee-rhel9@sha256%3A18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9\u0026tag=1782387549"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-aodh-api-rhel9@sha256%3Aee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-aodh-api-rhel9\u0026tag=1782756236"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-aodh-base-rhel9@sha256%3A3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-aodh-base-rhel9\u0026tag=1782753914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-aodh-evaluator-rhel9@sha256%3Aa1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9\u0026tag=1782756243"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-aodh-listener-rhel9@sha256%3A8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-aodh-listener-rhel9\u0026tag=1782756215"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-aodh-notifier-rhel9@sha256%3A8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9\u0026tag=1782756272"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-barbican-api-rhel9@sha256%3Ad302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-barbican-api-rhel9\u0026tag=1782755744"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-barbican-base-rhel9@sha256%3Ab078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-barbican-base-rhel9\u0026tag=1782753988"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-barbican-keystone-listener-rhel9@sha256%3Ae63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9\u0026tag=1782755692"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-barbican-worker-rhel9@sha256%3Ae4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-barbican-worker-rhel9\u0026tag=1782755681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"product_id": "registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-baremetal-agent-rhel9@sha256%3A2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9\u0026tag=1782821810"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"product_id": "registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-baremetal-rhel9-operator@sha256%3A2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator\u0026tag=1783426325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-base-rhel9@sha256%3Ada16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-base-rhel9\u0026tag=1782750250"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ceilometer-base-rhel9@sha256%3A318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9\u0026tag=1782753875"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ceilometer-central-rhel9@sha256%3Ac3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9\u0026tag=1782755683"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ceilometer-compute-rhel9@sha256%3A2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9\u0026tag=1782755517"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ceilometer-ipmi-rhel9@sha256%3A79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9\u0026tag=1782755672"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ceilometer-notification-rhel9@sha256%3A68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9\u0026tag=1782755591"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-cinder-api-rhel9@sha256%3A71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-cinder-api-rhel9\u0026tag=1782755663"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-cinder-backup-rhel9@sha256%3A1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-cinder-backup-rhel9\u0026tag=1782755741"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-cinder-base-rhel9@sha256%3Ac0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-cinder-base-rhel9\u0026tag=1782753845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-cinder-scheduler-rhel9@sha256%3A6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9\u0026tag=1782755647"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-cinder-volume-rhel9@sha256%3A8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-cinder-volume-rhel9\u0026tag=1782755633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-cloudkitty-api-rhel9@sha256%3Ac632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9\u0026tag=1782756549"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-cloudkitty-base-rhel9@sha256%3Aea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9\u0026tag=1782754017"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-cloudkitty-processor-rhel9@sha256%3A9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9\u0026tag=1782756534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-cron-rhel9@sha256%3A5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-cron-rhel9\u0026tag=1782752326"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-dependencies-rhel9@sha256%3Acb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-dependencies-rhel9\u0026tag=1782752327"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-designate-api-rhel9@sha256%3A50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-designate-api-rhel9\u0026tag=1782815285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-designate-backend-bind9-rhel9@sha256%3A99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9\u0026tag=1782755421"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-designate-base-rhel9@sha256%3A8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-designate-base-rhel9\u0026tag=1782753848"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-designate-central-rhel9@sha256%3A6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-designate-central-rhel9\u0026tag=1782755534"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-designate-mdns-rhel9@sha256%3Ae503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-designate-mdns-rhel9\u0026tag=1782755332"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-designate-producer-rhel9@sha256%3A2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-designate-producer-rhel9\u0026tag=1782755679"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-designate-sink-rhel9@sha256%3A9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-designate-sink-rhel9\u0026tag=1782755693"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-designate-worker-rhel9@sha256%3A63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-designate-worker-rhel9\u0026tag=1782755501"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-frr-rhel9@sha256%3A5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-frr-rhel9\u0026tag=1782752379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-glance-api-rhel9@sha256%3Aee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-glance-api-rhel9\u0026tag=1782753874"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-haproxy-rhel9@sha256%3A19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-haproxy-rhel9\u0026tag=1782752326"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-heat-api-cfn-rhel9@sha256%3A6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9\u0026tag=1782815828"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-heat-api-rhel9@sha256%3Aa0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-heat-api-rhel9\u0026tag=1782815833"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-heat-base-rhel9@sha256%3A49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-heat-base-rhel9\u0026tag=1782814656"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-heat-engine-rhel9@sha256%3A1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-heat-engine-rhel9\u0026tag=1782815848"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-horizon-rhel9@sha256%3A05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-horizon-rhel9\u0026tag=1782753843"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ironic-api-rhel9@sha256%3A279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ironic-api-rhel9\u0026tag=1782818949"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ironic-base-rhel9@sha256%3Abb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ironic-base-rhel9\u0026tag=1782753876"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ironic-conductor-rhel9@sha256%3Ac774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9\u0026tag=1782819029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ironic-inspector-rhel9@sha256%3A2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9\u0026tag=1782818966"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ironic-neutron-agent-rhel9@sha256%3A9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9\u0026tag=1782756018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ironic-pxe-rhel9@sha256%3A0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9\u0026tag=1782819053"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-iscsid-rhel9@sha256%3A43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-iscsid-rhel9\u0026tag=1782753875"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-keystone-rhel9@sha256%3A54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-keystone-rhel9\u0026tag=1782753871"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-manila-api-rhel9@sha256%3Ae5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-manila-api-rhel9\u0026tag=1782754438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-manila-base-rhel9@sha256%3A4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-manila-base-rhel9\u0026tag=1782753684"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-manila-scheduler-rhel9@sha256%3A281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9\u0026tag=1782754453"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-manila-share-rhel9@sha256%3Aac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-manila-share-rhel9\u0026tag=1782754459"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-mariadb-rhel9@sha256%3Ad45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-mariadb-rhel9\u0026tag=1782752329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-memcached-rhel9@sha256%3A18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-memcached-rhel9\u0026tag=1782752372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-multipathd-rhel9@sha256%3A0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-multipathd-rhel9\u0026tag=1782752306"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"product_id": "registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-must-gather-rhel9@sha256%3Ad4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9\u0026tag=1782387548"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-netutils-rhel9@sha256%3A243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-netutils-rhel9\u0026tag=1782815271"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"product_id": "registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-network-exporter-rhel9@sha256%3A67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9\u0026tag=1782140320"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-neutron-agent-base-rhel9@sha256%3A314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9\u0026tag=1782755892"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-neutron-base-rhel9@sha256%3A6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-neutron-base-rhel9\u0026tag=1782753922"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-neutron-dhcp-agent-rhel9@sha256%3A11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9\u0026tag=1782757042"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-neutron-metadata-agent-ovn-rhel9@sha256%3A8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9\u0026tag=1782757053"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-neutron-ovn-agent-rhel9@sha256%3A49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9\u0026tag=1782757100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-neutron-server-rhel9@sha256%3Aa0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-neutron-server-rhel9\u0026tag=1782755780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-neutron-sriov-agent-rhel9@sha256%3A63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9\u0026tag=1782755836"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-nova-api-rhel9@sha256%3A18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-nova-api-rhel9\u0026tag=1782756533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-nova-base-rhel9@sha256%3Afa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-nova-base-rhel9\u0026tag=1782753914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-nova-compute-rhel9@sha256%3A62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-nova-compute-rhel9\u0026tag=1782756454"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-nova-conductor-rhel9@sha256%3Afffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-nova-conductor-rhel9\u0026tag=1782756557"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-nova-novncproxy-rhel9@sha256%3Ae3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9\u0026tag=1782756545"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-nova-scheduler-rhel9@sha256%3Aad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9\u0026tag=1782756456"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-octavia-api-rhel9@sha256%3Afec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-octavia-api-rhel9\u0026tag=1782754919"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-octavia-base-rhel9@sha256%3A89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-octavia-base-rhel9\u0026tag=1782753846"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-octavia-health-manager-rhel9@sha256%3Ae4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9\u0026tag=1782755051"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-octavia-housekeeping-rhel9@sha256%3A7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9\u0026tag=1782754958"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-octavia-worker-rhel9@sha256%3A336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-octavia-worker-rhel9\u0026tag=1782754933"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-openstackclient-rhel9@sha256%3Acdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-openstackclient-rhel9\u0026tag=1782752309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"product_id": "registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-operator-bundle@sha256%3Ad26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/openstack-operator-bundle\u0026tag=1783427987"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"product_id": "registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-rhel9-operator@sha256%3A6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/openstack-rhel9-operator\u0026tag=1782395908"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ovn-base-rhel9@sha256%3A7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ovn-base-rhel9\u0026tag=1782752295"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ovn-bgp-agent-rhel9@sha256%3A58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9\u0026tag=1782752319"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ovn-controller-rhel9@sha256%3A669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ovn-controller-rhel9\u0026tag=1782815266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ovn-nb-db-server-rhel9@sha256%3Ac38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9\u0026tag=1782753459"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ovn-northd-rhel9@sha256%3A8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ovn-northd-rhel9\u0026tag=1782753513"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-ovn-sb-db-server-rhel9@sha256%3Ae70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9\u0026tag=1782753474"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-placement-api-rhel9@sha256%3A503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-placement-api-rhel9\u0026tag=1782753910"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-rabbitmq-rhel9@sha256%3A7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-rabbitmq-rhel9\u0026tag=1782752366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-redis-rhel9@sha256%3Ad36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-redis-rhel9\u0026tag=1782752327"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-rsyslog-rhel9@sha256%3A58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-rsyslog-rhel9\u0026tag=1782752318"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-swift-account-rhel9@sha256%3A0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-swift-account-rhel9\u0026tag=1783070890"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-swift-base-rhel9@sha256%3A2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-swift-base-rhel9\u0026tag=1783069225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-swift-container-rhel9@sha256%3A4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-swift-container-rhel9\u0026tag=1783070900"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-swift-object-rhel9@sha256%3A9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-swift-object-rhel9\u0026tag=1783070899"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-swift-proxy-server-rhel9@sha256%3Aac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9\u0026tag=1783070897"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-tempest-all-rhel9@sha256%3A7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-tempest-all-rhel9\u0026tag=1782755070"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-tempest-rhel9@sha256%3Aabbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-tempest-rhel9\u0026tag=1782753899"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-unbound-rhel9@sha256%3Ad4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-unbound-rhel9\u0026tag=1782752304"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-watcher-api-rhel9@sha256%3A3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-watcher-api-rhel9\u0026tag=1782756272"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-watcher-applier-rhel9@sha256%3A526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-watcher-applier-rhel9\u0026tag=1782756267"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-watcher-base-rhel9@sha256%3A23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-watcher-base-rhel9\u0026tag=1782754031"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64",
"product": {
"name": "registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64",
"product_id": "registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openstack-watcher-decision-engine-rhel9@sha256%3Ae89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db?arch=amd64\u0026repository_url=registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9\u0026tag=1782756264"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"product_id": "registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ovn-rhel9-operator@sha256%3A112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/ovn-rhel9-operator\u0026tag=1782387872"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"product_id": "registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-podman-exporter-rhel9@sha256%3A6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9\u0026tag=1782140188"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"product_id": "registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sg-core-rhel9@sha256%3A7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/sg-core-rhel9\u0026tag=1782140297"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"product_id": "registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/swift-rhel9-operator@sha256%3A63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/swift-rhel9-operator\u0026tag=1782387610"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"product_id": "registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/telemetry-rhel9-operator@sha256%3A8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/telemetry-rhel9-operator\u0026tag=1782473082"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"product_id": "registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"product_identification_helper": {
"purl": "pkg:oci/test-rhel9-operator@sha256%3A08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/test-rhel9-operator\u0026tag=1782387606"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"product": {
"name": "registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"product_id": "registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/watcher-rhel9-operator@sha256%3Ad4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5?arch=amd64\u0026repository_url=registry.redhat.io/rhoso-operators/watcher-rhel9-operator\u0026tag=1782411389"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64"
},
"product_reference": "registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64"
},
"product_reference": "registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64"
},
"product_reference": "registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64"
},
"product_reference": "registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
},
"product_reference": "registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64",
"relates_to_product_reference": "Red Hat OpenStack Services on OpenShift 18.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64"
],
"known_not_affected": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T11:15:05+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update as a new RHOSO 18.0 deployment, see \u201cDeploying Red Hat OpenStack Services on OpenShift\u201d at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index\n\nFor details on how to apply this update to an existing RHOSO 18.0 deployment, see \u201cUpdating your environment to the latest maintenance release\u201d at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index",
"product_ids": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39894"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64"
],
"known_not_affected": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T11:15:05+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update as a new RHOSO 18.0 deployment, see \u201cDeploying Red Hat OpenStack Services on OpenShift\u201d at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index\n\nFor details on how to apply this update to an existing RHOSO 18.0 deployment, see \u201cUpdating your environment to the latest maintenance release\u201d at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index",
"product_ids": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64"
],
"known_not_affected": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T11:15:05+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update as a new RHOSO 18.0 deployment, see \u201cDeploying Red Hat OpenStack Services on OpenShift\u201d at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index\n\nFor details on how to apply this update to an existing RHOSO 18.0 deployment, see \u201cUpdating your environment to the latest maintenance release\u201d at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index",
"product_ids": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39894"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/barbican-rhel9-operator@sha256:a7f59f1e7c7381cb1cc9d9deb8e05811233683432db49bb03439709c056e35f8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/cinder-rhel9-operator@sha256:28301f4f8b1c2510e9b4bb9e253eee0266949a136831534588d12f166bccc128_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/designate-rhel9-operator@sha256:97dad11454fbe7e397850cf18a10657e1964779a122f6ac228044447d166c495_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:18d956b794aeeb762fa3ad6ed6b15d6513035406cf851a361e0d1f09ed43af42_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:766313d87a01fca4857dabc7befc0b34b3ddc5e27cb4012d60bdeec6f99ed5c7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:f19e8088aaaf5d5ed6fdcfcdfbb1203e583b8865fac8e4ea3a222b9a14ecc2f7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:5bdca1dc296677e613796ca16d87548cb85350db0c6105e36f8406ca834fdb93_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/infra-rhel9-operator@sha256:49aa50cb8fa56b42af9dc47ef465395760e139ea854d2f84837332b5a9e2edad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:2855a98dde02b11f0fb1029ec4f89df9c49ee178c3e073907fe616bf6308235d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/keystone-rhel9-operator@sha256:5511f454518fc12455a47a9882f6697b1ba796878857109c63bcd946675b1d7e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/manila-rhel9-operator@sha256:bec42585ef27f353931a3b69fcd6a03a8020f7605077bc02762de94c4ffc80fb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mariadb-rhel9-operator@sha256:bd2a0873e8b7b00c37749ff65ac9d68877c2b13e3da43d43f6f3160cdfd1367f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/mysqld-exporter-rhel9@sha256:2094fc3bde1d6060207fd649a64837513ca8303bf41ec795cedc8d90a1068544_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/neutron-rhel9-operator@sha256:6434013e71cbc1bd9c703b876e54124944922b9d313a50c385d1040f38551978_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:011bf714e723b82a43aef0fe7ff9fc3479f2259320ab68a9c1a9b3e4ac20ac3b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/octavia-rhel9-operator@sha256:2fce21ac220fc706abdbd138750dc6d935f5cccfdafc2bfffff15ea5d65395b1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-agent-rhel9@sha256:2de6791ea8b1a537a2e78f360695a6b2a444af460ce082fec4c9a92d16f0482b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-baremetal-rhel9-operator@sha256:2f8ef66a7da6c7bdc4374a23785cd7343ac38aaa6ed6c1e8e6b335198347fb76_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-must-gather-rhel9@sha256:d4c8a49c9d1efb5956573f8d55512db00d4ce23f5375b4d0f1004021104b8d29_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-network-exporter-rhel9@sha256:67ff558499300b093cecc62ae79f53003a828a1a50762874d9d22c3a47f23de4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-operator-bundle@sha256:d26c9d4d7c62231a180f8a33aafd54d03da3a03b1ca1070e7a7a2b55f59db1bc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:6ad7df72ed580e6f0e5e7f517c9b5c04011981fd2d15ba52a7c583d3b47f26c6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:112b3034d398bafa049408b701c4ac0ba59376808058c58294415d33efa8f49f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9@sha256:6b91b5fd5d38b9577ef1f1950575cc620294d945fc72f3d42d1bc8f934a4c76c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/sg-core-rhel9@sha256:7b71443197a0b7591620aad8ce476c3bb0b12130a4ee95e90cac3417694af485_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/swift-rhel9-operator@sha256:63ca7de729e3e71192bdc05ce209d09a80959b37e7f34caaa2c5c7c19183a05e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/telemetry-rhel9-operator@sha256:8f35e81bed2b31fa52deec93d13480234317540faf88d033596848d4a82348a0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/test-rhel9-operator@sha256:08312137f57f35b00b79711f6de8bdb6d3ea7c38d940d867cb39a4ba99a89f92_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso-operators/watcher-rhel9-operator@sha256:d4ca11a077e4cfd4148c7a61d9045bf77e60b2c07d7ef4273545bb71c19914e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/edpm-hardened-uefi-rhel9@sha256:77f2878945bf71fe5de49b4d2f032345b2f25aafec09247ab507050bb69a10a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/ironic-python-agent-rhel9@sha256:25cd4f73a6131dc3b4367d79a383347cf65c00f67057acb73ad16206f299faec_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/octavia-amphora-image-rhel9@sha256:dac199fc7526c27f04d4772305ce7e7fe30e3e4cfe4c368a133ad441293920cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-api-rhel9@sha256:ee8ecf3c728748215dcd76e6c112b27d554f354f24bbd5f47d8a4d9e229e7d33_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-base-rhel9@sha256:3e6e15fc1968cd86a56c03f04f6faf57f221806a2d40a041f95c1070477da7e9_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-evaluator-rhel9@sha256:a1a8e6c03305b9d393c76179692f2e1d87193a9676299edcfb94746264944342_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:8868da51f048aa9d131630577af88f21dd32d04276495eaf3ea247abc78b1e1d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-aodh-notifier-rhel9@sha256:8fc027b652ef9babf56a75907299e484fc10dea8a01f82ba30ed84232be13088_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:d302f4cc4ceacf744c3d5c53760b6cbb6e7184a71bc14e6e6ad3a72a3bf11f75_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-base-rhel9@sha256:b078189dfd53ba2fa9a520f0fad6c0a7736fa6eed3941fe5263602eee1e44f22_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-keystone-listener-rhel9@sha256:e63bb483f75e91e090f52a1075641e83839b5357b3733403127b13f9724fbab3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-barbican-worker-rhel9@sha256:e4a6c543aa4c59270d8697c60155974fa776617265dede64d11b179cc3e98686_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-base-rhel9@sha256:da16dd413fead0a17f1fcf17790d9e6203ec958882242f57a848b84a55f5f620_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-base-rhel9@sha256:318ffdb8725f05b0eb4393115b74f48c70c879cc043bbd3ebaa44a71bfd76dad_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-central-rhel9@sha256:c3d76bae3d71ad1908e6a3504600d1f6f9d8e74f3843cc075ea063522f60f28d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-compute-rhel9@sha256:2cc3e07e08ec9f70e61a77c7ec4c017a2084a38868eab775d909cd493e09ede7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-ipmi-rhel9@sha256:79568cc77c8b8f0b8bedbcceeca95a2f5378353282c9a8543da18b10d3ffe340_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ceilometer-notification-rhel9@sha256:68210809130808af387498e26ab49760f343974be74e6c6070b4d3a5ccc4feba_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-api-rhel9@sha256:71669ff230fe21d326addacc9ee2dee6049cbb2e73a18c0624cdc8e0cd31d3e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:1d564edc1c4511ada9bd2ee5d822ece4c9eef126e523168f5fc321207d34c31f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-base-rhel9@sha256:c0418d8c6549f37b8856321318a2e13fe27ac3d2e8c719d6d81c40be63efccea_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:6b2e765a77b1b0ab1785ef5cb6b673948eab0b92b1bbae67af662cab72ff90e7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cinder-volume-rhel9@sha256:8e52170badd566a1dadc8edfe0da0e494e47e9929eb81d05389f831c7a9f2116_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-api-rhel9@sha256:c632cc7678332d3552d0e78f63b7c3b3ceb5cea17030c6e7d3e9a3d2fea3728a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-base-rhel9@sha256:ea22fb79f93d30f14f408658dcd73b57172b932c7d0c40e227cc74f1236e9877_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cloudkitty-processor-rhel9@sha256:9312cf60cc0a1b61948d7959c32c56d35da1452f83df98f5802bd3640f5fc9a7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-cron-rhel9@sha256:5b47149bd2b6cc45b9273bffde7280027e603358b7c0f160d2b79c8335375126_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-dependencies-rhel9@sha256:cb73d51139e027df88d6d6f392675034c7fe1e9c2011567e6d80bf672133d9e2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:50cd3e2ce104f51a75140b4c6c48a419b3866471abf00fa905c872c89b38939a_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-backend-bind9-rhel9@sha256:99eb3efec61e80bc667c89e0b7d83f6a9f5e05546bc1b293e9eed2eee0bc5e2d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-base-rhel9@sha256:8945bf50c821a80e49c75e92f7b612dca4afb8756ad5484ddee9d84d8f79dbb8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-central-rhel9@sha256:6d3a4bf3c3943e80f25d8fc7bf62b3a02cf1e971a0b2485e74e2d08bbf616ff2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-mdns-rhel9@sha256:e503064a6590cadd9428b315def4723b50f11bd346cc2155dc9a4e2d5805b097_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-producer-rhel9@sha256:2b8e6159f5608793b78e425f884ccf37d5c7e21f07ba60affe0b219828a57fa0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-sink-rhel9@sha256:9eb040f02a26c2616936ffb1a840ef46f1fad9f7c38b5e7d274e99beb854b4d4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-designate-worker-rhel9@sha256:63555b634625922c2dc7827256ef4ca45eb4ed52964ad2cd7cc3d01bc4e2c777_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:5e062c733a81f77e21840b4ba50e2162323554ced585ade581bce4674bb49836_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-glance-api-rhel9@sha256:ee7d0c5d5f62333ee2e84250b480b5afbb7d9dd430381aae099de60dc32ecf28_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-haproxy-rhel9@sha256:19fa85f38dc1aafb86ef9415c0cae38f6b791ece3fcfe59803f84072d883c6dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:6023b714e02a432acd312f49cd169353e3a929ecb70d73d20417e3c26c9bb4ae_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-api-rhel9@sha256:a0ea5a97d1c4c634a6e74b86e7fae6966aa1df73be8fd530b7064f4ddbf4304e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-base-rhel9@sha256:49be8f439a4cd4bf21feb062a8223093f49dda57ff82c4d68105aee882802cc3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-heat-engine-rhel9@sha256:1911c5dc17979bf77a38f7d1f20b3e756377f796268e33eb938a500b4d22a594_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-horizon-rhel9@sha256:05674b3c5696f6f491fec3c1befc29a53ecefa9387837fcde02bf4a9650b512c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-api-rhel9@sha256:279b9b89029b4c649bca602d4153edf072162f5c9fc6ad883f8ff396e4291622_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-base-rhel9@sha256:bb676dd5fce84c0ff3ea4db692f3675d489a5dac7ff016d7d80ccecb0d822f16_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-conductor-rhel9@sha256:c774a90ae343d2a308c016393d7ba2d6fc71dc3f2d989b5566d8702f2bc379d7_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-inspector-rhel9@sha256:2706b68a92dba6e01088c9e4bca82f88574328ebff07d6573c75a5779f950bbb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-neutron-agent-rhel9@sha256:9059cd04ae751944059fa4ab2c4d104a008d08e2696e044a30a554ad523900c4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ironic-pxe-rhel9@sha256:0120f9e7512cc36dad16d62099efa6bb1067f1632fdb09c3e885cdaf5f6bb7a4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-iscsid-rhel9@sha256:43bbcc244e4c189cea1559b6695a03056e63c8310fcfc0b5a01bf33fb0ab0578_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-keystone-rhel9@sha256:54dbf554ec0d98ef94ab99313eff13fa69768b562b2978444ade8881798c0db0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-api-rhel9@sha256:e5645cf08445a561e71ac7c011dc3a30f1714ac7acbf26887e8240e17cc5a73e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-base-rhel9@sha256:4a14a3a9b72b7e7ed304f090e865d3daed6d16fc4351a953c1ff54645fadeb24_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-scheduler-rhel9@sha256:281c4ed77f80664dab299b04f2cb4c6b49c02a4b25435d1d8b5bff280c21d7b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-manila-share-rhel9@sha256:ac1483a2057b380a54efa9a3c635533e7beb5bbdb9e2eee255391c34962ae273_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-mariadb-rhel9@sha256:d45ec5f4bdb304439ed17594465700ec645d5d42ed29c772647073c1a534befe_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:18851c261a281be2b46cccbb94360af8d3f63a1723b977f3f7a369056ddaa99c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-multipathd-rhel9@sha256:0d8aab3611af3bdd2aff82e9f824f9d506cd53a38a048d69134a045403ef43a1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-netutils-rhel9@sha256:243f8296060d19890be18b2e80078495b51db1ad1f213cec0a75ae36fa90e71c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-agent-base-rhel9@sha256:314a76b52aecd4b53b9c5a68acbccbeb3954272c98948dd1ff922537a2909093_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-base-rhel9@sha256:6ffb32cf00c9ae91a8f98d1e831ecd63709ee317bba496fba0884804a2076d7f_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-dhcp-agent-rhel9@sha256:11508fa7b6d4763b833d3ad19a0a4b6aa00b63e9f838fe4a245d83ceab3e0c7d_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-metadata-agent-ovn-rhel9@sha256:8a8c589651a37dfc605dd450a5613e83421dce2b74d5dfa9951c1788a0225cef_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-ovn-agent-rhel9@sha256:49f5fc592178cd5c4f6896efafb071dc261ec94a6dd0427bba338d7ae08c1188_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-server-rhel9@sha256:a0b237cca8fb8c19f44fdbbaffbed8e63aa0e1095433fe8ca03686e3112dc118_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:63541b045121cac09cc572d89c5efc6568b0d0fc78349381c2e24d29585a9ac4_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-api-rhel9@sha256:18af9d4b4fec6aacde721130896c409a63df5941a88d6dac956bf4c4ed4288c0_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:fa397c56591ceada7d9f2885d5c879045f4052c61cc593ba81b389661dc009b3_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-compute-rhel9@sha256:62c8211e75b0150e9287ad67888cece7de5d05e52dbd3dfb1444f08f4ebfb48c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-conductor-rhel9@sha256:fffe1704e57a91598ebfdab53df6d403dc38cf8ef894cb3ff7c5b02c6f50464b_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-novncproxy-rhel9@sha256:e3a6566fbcde2226dc0a5ac262fa1f298c28a0c5ed22965cbf1c5134c6cc4142_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-nova-scheduler-rhel9@sha256:ad635f4eb39039a9bd5f9de14d316ab2973134d924dfcf3795f05d92757b07b2_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-api-rhel9@sha256:fec022d4327bb4fcba1a8edc2e805b96e2d5611b2894295ed3f0d04f4599275c_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-base-rhel9@sha256:89b12150a9f283ddeae1fe7583ac3de9a6b56924036c1890b9b256940b4908b8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-health-manager-rhel9@sha256:e4095b7cf43f379c6467fa286b9cf2bd6f00879cad2f91adea8c6a72f6625dcd_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-housekeeping-rhel9@sha256:7e433273d4713f3b6aa7d2985a2948e420d3cb7abd78fb39c49148e488732e20_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-octavia-worker-rhel9@sha256:336142fc3b33e9227bf9869a51414f032eef1829d535b228a3fb05ace1868239_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-openstackclient-rhel9@sha256:cdd986b7b6b76653d527e485bc8f7b051e062c5b558446bde34b65b15349c3dc_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-base-rhel9@sha256:7e8a0190539779afc733d0143159a245694fe5aa44aeb4b6b8e8fdc3946121ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-bgp-agent-rhel9@sha256:58f6c00e7ebab9ccfa1caf248bc81e547d35ea68b039ccb3d76f700453533786_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-controller-rhel9@sha256:669ad76bd79ddecc1aa2bc0aa6ee51275d1ab0b03ef4a8bff215e84d922932fa_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-nb-db-server-rhel9@sha256:c38f4e58bcc15f92b6aea474f9ca3a85e6824251a03ebea83302e410924d26d8_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-northd-rhel9@sha256:8bdc1b8cb449c6a3eb4e0c498fb9740499c5041970b9f89e8b83720a3a30b600_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:e70657839f7706ba051763885ae38da403f1be4b18a8c0c788e0869b755939cb_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-placement-api-rhel9@sha256:503090b147f5b1204828bdf1422625238a8af70531dde159997706c12898ab66_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:7531e00b0493617e3f97ef72d633107d280891d4b9a26fd26bd9c2ebb168cd4e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-redis-rhel9@sha256:d36333073a1819b889be4ffaf10585f5c7435fb8d5d0c349d793795871b97da5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-rsyslog-rhel9@sha256:58dcc63de587244a333dfe99558f1b19385d6cb36e3d33587d12832d519cdb1e_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-account-rhel9@sha256:0154d4c5c50b16d9676358225884361565a68e31c5a57fccef46febd22297b88_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-base-rhel9@sha256:2624d7e104f61daf9cd8e4795e7a9de05eb29a7286721fe7d1d2e855ced5e5e5_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-container-rhel9@sha256:4cc1aac18120e7c5427ffc60ded933c81ea8a8a723a0473b23ff9a6fe7065c91_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-object-rhel9@sha256:9a2fa912031a4ab1f99bbc6f8c9c7e625ed8811dd978680571c191472355a002_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-swift-proxy-server-rhel9@sha256:ac474181c14c9fff14ffe33a26963f3138303107f8a733f25cadeef325f824cf_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-all-rhel9@sha256:7ae63137233f97befd9cfb3a10136fcf6b642fb76b7afb3ed163efaea92d6da1_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-tempest-rhel9@sha256:abbf9663c8c8dc2386633d91b1b74be475210ea27edaad57df5df85db8e80146_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-unbound-rhel9@sha256:d4019a7d6a2105695a21a9651883cb6f0b55c2478f058856599afb9881133624_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-api-rhel9@sha256:3d10598f55b1dd13ba9659320538e14b88604b888ab9721549a8df04e36101ff_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-applier-rhel9@sha256:526c1d86ecc813a36f82b450f17b1edb48489a70066d5eec860869b0bbb48ce6_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-base-rhel9@sha256:23f37b9ac886f8287dc0c7ddbcab063d8e9043151a7a259f4b3823cabc17e385_amd64",
"Red Hat OpenStack Services on OpenShift 18.0:registry.redhat.io/rhoso/openstack-watcher-decision-engine-rhel9@sha256:e89583e417be72775b450a052152b6bc22e1ed1965cdc5b03c19224e460347db_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
}
]
}
RHSA-2026:40118
Vulnerability from csaf_redhat - Published: 2026-07-15 16:22 - Updated: 2026-07-21 14:50Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
* Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Moderate
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 | — |
Workaround
|
Threats
Impact
Important
References
232 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.1.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40118",
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32141",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40118.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update",
"tracking": {
"current_release_date": "2026-07-21T14:50:45+00:00",
"generator": {
"date": "2026-07-21T14:50:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:40118",
"initial_release_date": "2026-07-15T16:22:53+00:00",
"revision_history": [
{
"date": "2026-07-15T16:22:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T14:50:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Edge Manager 1.1",
"product": {
"name": "Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3Abeaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1784128388"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3A2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1784128860"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel9@sha256%3A1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1784126780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3Ab1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1784127787"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3Ab98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1784126762"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel9@sha256%3A9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9\u0026tag=1784127762"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel9@sha256%3Aafba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9\u0026tag=1784126832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3A7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1784126774"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3A918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1784127791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3Afcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1784127135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel9@sha256%3Af40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel9\u0026tag=1784127736"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3A734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1784126822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3A0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1784126733"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1784127775"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3Ae05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1784128388"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3Ae5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1784128860"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel9@sha256%3A41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1784126780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3Ad8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1784127787"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3A5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1784126762"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel9@sha256%3A0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9\u0026tag=1784127762"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel9@sha256%3A39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9\u0026tag=1784126832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3Abaefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1784126774"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3Adc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1784127791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3A849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1784127135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel9@sha256%3A7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel9\u0026tag=1784127736"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3Abd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1784126822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3A7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1784126733"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1784127775"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32141",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T19:01:30.987208+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447083"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the flatted npm library. flatted\u0027s parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "RHBZ#2447083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606",
"url": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/pull/88",
"url": "https://github.com/WebReflection/flatted/pull/88"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"
}
],
"release_date": "2026-03-12T18:08:09.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T16:22:53+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:beaacb4be3f6b8f814ea6581b92c34b56676ec49adc0428ed757731c14a56eae_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:e05ac211c00d4def3c8b4fbea4c4a191a1ea1e42dbc82c15dc17c07404be895c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:2729e3aa249d0b09a893d372ad150d09b955cd97b770b71b233592a04f63499f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:e5e79c8f41b374f816570a6203b13438fbcc5862c8bf6fbb3eb0aeb414dfe342_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:1ef321ebc3a9b1b00e6ec9e8739a90a8a9ce5090a62080091cdd84f8fb09c5e2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:41646b37ef607efd7109f0450d45aaab7b238a496ec2c00668ab17a417b85c54_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:b1985eaa9816fa7cc50aaf86ea722c56a8886554423a78c0623dc4ee04b16185_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:d8986490f548237eb1e2790eb49c7eab29e2de21aeb4834e55fb6525b048c8dc_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:5b68fdcbf91efbec4932fe4dfed16d55fe37dd39d426712a8549c089fea5027c_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:b98b7b2c190bcae4b576676a610e0dd1d802c9a4f8be4a71560f4c34dbb056cf_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:0041833131abcec4fb42c2ee11929cb8aeecee37b3d03245f898c7c0d0a7b5fe_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:9f55a517fadcb7d5082f9d6f4a906c20d4981c09231d3081ca1295dc5d0bfd2f_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:39ce652bf1a16685cd85818131281235e8fa2da311f7fcf0aad06d06a28979d5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:afba0e403ca2873a477c68adbd3866147904a34f1d6bb94741091b0d269e4bf2_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:7ca9965aabd79b15a3df9cddcab95e2cd3dc8e8eb78b2dba82b1f750e8f32398_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:baefe61c9054e19cd1f84485ed5482cdbb529e3a90b34afab75f74a2efc00fb2_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:918510077d32a453641cd84fe9332e8db287bdf4ed5a7a7fbdf69518f75a7811_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:dc8ef7e38b65248b2452037abfd03a108ea82439421d7caee528607f2aaf54f5_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:849e8aade0c291f2e33e227c983071e5899c38326af4b06c55693de77939e87e_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:fcdaa73650ca2159743281854f85a365fc0a69eec3120a4f7b2eb7d2b04a1578_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:734eff9f2aca059dc262e6a477dd42509364a7f3187e0e083fabb7335decbaf5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:bd0faf7b42dea2a06be2dcd48a199ff8486988c874d0dbda202de0ef94980b31_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:7eda4f8ce4002ded99b7dc4574fbc77e90904b859c32262e0e5e4075de12c105_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:f40c17c9dfd12d87e20eccaed3a2a39a32ab867955b21b956cdcfcf6c87717a7_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:0485733482f41a980933afa20c7eac1189c7f41ca553887020ed635d8f3af3f1_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:7181bf99791f472d0558bf1a06a35e29e6ec1bea2af11ada37307c31c9867c85_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:05c23067536a9d5b2969355df88a5b107d518778c6614f6f24417ba7c096bc20_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:92baae35191a113fc41bee45d38559db1061b408e5718e17a45875f661461105_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:40945
Vulnerability from csaf_redhat - Published: 2026-07-16 10:53 - Updated: 2026-07-21 14:50Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
* Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Moderate
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 | — |
Workaround
|
Threats
Impact
Important
References
232 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.1.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40945",
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32141",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40945.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update",
"tracking": {
"current_release_date": "2026-07-21T14:50:49+00:00",
"generator": {
"date": "2026-07-21T14:50:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:40945",
"initial_release_date": "2026-07-16T10:53:15+00:00",
"revision_history": [
{
"date": "2026-07-16T10:53:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T14:50:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Edge Manager 1.1",
"product": {
"name": "Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3A776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1784194638"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3A28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1784194353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel10@sha256%3Afe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1784196588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1784195620"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3A53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1784194309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3A1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1784194188"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3Aff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1784194653"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3Ad788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1784194980"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3A15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1784194938"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel10@sha256%3A722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1784194574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3A0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1784194347"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel10@sha256%3Af7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1784194971"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel10@sha256%3A46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel10\u0026tag=1784194638"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel10@sha256%3A4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10\u0026tag=1784194353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel10@sha256%3A54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel10\u0026tag=1784196588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel10@sha256%3A8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10\u0026tag=1784195620"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel10@sha256%3Afdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel10\u0026tag=1784194309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel10@sha256%3A413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel10@sha256%3A910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10\u0026tag=1784194188"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel10@sha256%3Ac91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel10\u0026tag=1784194653"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel10@sha256%3A3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel10\u0026tag=1784194144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel10@sha256%3A7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10\u0026tag=1784194980"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel10@sha256%3Aa2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel10\u0026tag=1784194938"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel10@sha256%3Abc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel10\u0026tag=1784194574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel10@sha256%3Ac1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10\u0026tag=1784194347"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel10@sha256%3A464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel10\u0026tag=1784194971"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64 as a component of Red Hat Edge Manager 1.1",
"product_id": "Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32141",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T19:01:30.987208+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447083"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the flatted npm library. flatted\u0027s parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "RHBZ#2447083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606",
"url": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/pull/88",
"url": "https://github.com/WebReflection/flatted/pull/88"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"
}
],
"release_date": "2026-03-12T18:08:09.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:53:15+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:46f199ef17120950d7e93c7a961f84d2323d8a5c43f5011e6ae627d345e0b068_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alert-exporter-rhel10@sha256:776d29cf3b89a8c3d64dcc489ef61d27b9f60564959bdaa63a672c92db9cd04c_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:28ea0930eb02313f5263f324d1a49660b33fb5591f95b40f31bd759617aa1907_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10@sha256:4bf6b54a4bfe93f97263a6b2c58f70caab13535e37190c62c87b1feac543ff64_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:54a4afb838796f1ceb3da0b6e1b0ad3c97e109f9b030768d69d9ee5a86da7095_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-api-rhel10@sha256:fe6e2a256f7f3f696f79f79ab3ce7caf3a39f32f128542c102955dacfe8c7b56_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:307b95e668b576c0401be69c0e795afbf289d6e62df98aaf02fd2f06d8da3bbc_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel10@sha256:8a9a634943f7d87701b385e546fe4e8e76b1ec70c39d38db1cd5ea688c6d08ce_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:53b36674b1276fb57c70fa059771d627e424a575e82f18fb04d4c955544595ca_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-db-setup-rhel10@sha256:fdd9f525cc859eb6c0d110c9b0d366031789060b5b7ab149087f0676e8619ea8_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:413b2e31d26dda7222710a7c917708e30eb8e28c99b8eccd742d19b32da88460_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel10@sha256:9740ee00386011c4faa90e5ab073140351889615a4bca5721092a5c0f65cac99_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:1f0cf97cd192812a11b6503d014eff731122c88745e0be01ad9eb16be400e66a_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel10@sha256:910062b408e6a38fdc619446da9ca46a2388715a3fc9daf9966942d6318ea128_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:c91bd430b3716a63dbfba125b71f76785a946e2c4a8e95e912a6e9a4895e6d05_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-pam-issuer-rhel10@sha256:ff588e0f2607fe83d49724d0f6f8e8211a8390cbdada721cf7b9a6a8e48dd459_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:3c88db541868675a34ed865d5915f9017b135bf63414a9b646732ddbdb7954bf_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-periodic-rhel10@sha256:d788e558e4ae745a4c522f66cb20deaf7cb05ef687d48200b35ddd814d631ed3_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:6b48127195e694b31bb715c95967d3048fe873b0e73b66d1951f1a37b3447fd6_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel10@sha256:7b392b0e21d3893efb23c1de0fe40353bfcc84c8ed02b839fc842f1f43216942_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:15376bc6e9cc4c3b15a3df153f0589c18ced018ddb61d268bdc36071d7e5ca33_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-ocp-rhel10@sha256:a2e646cf23af1fa2f286956775706d420f25cd8980fd559e4d2b6034aa467272_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:722521b8e67bfab1ae2c9d97efb09bdb39036c2d90d0ff95aef9178d2bcc8d67_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-ui-rhel10@sha256:bc6a86545ca397ed034b085f3c3f18dbd1d92e2bdcabe034d98cda9aa5eb32f0_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:0888b7a9a22d46339efe06f579b1e9c355211f6ef559fadad57ceb5fe8018ba5_amd64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel10@sha256:c1dcc4930b147562e0eaea24d1947afd66aa52f2c4330a583defe3955afab45b_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:464d0b617c3cc12d3c9b08b84bd9b42b1ebf2903a677a15565caedecad4785b3_arm64",
"Red Hat Edge Manager 1.1:registry.redhat.io/rhem/flightctl-worker-rhel10@sha256:f7234afa82c317b5708da4fc5113949846ca9e67387c06d5f33758aef391db53_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:41019
Vulnerability from csaf_redhat - Published: 2026-07-16 14:35 - Updated: 2026-07-21 14:50Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Security fixes:
* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)
* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)
* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)
* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)
* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)
* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)
* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
8.3 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
References
182 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.1.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\nRed Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\nRed Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.\n\nSecurity fixes:\n\n* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)\n* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)\n* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)\n* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)\n* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)\n* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)\n* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)\n* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41019",
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_enterprise_linux/rhem-integrating-with-aap",
"url": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_enterprise_linux/rhem-integrating-with-aap"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_openshift_container_platform/edge-manager-install-rhem-ocp#edge-manager-verify-rhem-acm-console",
"url": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_openshift_container_platform/edge-manager-install-rhem-ocp#edge-manager-verify-rhem-acm-console"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41019.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update",
"tracking": {
"current_release_date": "2026-07-21T14:50:52+00:00",
"generator": {
"date": "2026-07-21T14:50:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:41019",
"initial_release_date": "2026-07-16T14:35:59+00:00",
"revision_history": [
{
"date": "2026-07-16T14:35:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-16T14:35:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T14:50:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEM 1.1 for RHEL 10",
"product": {
"name": "RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el10"
}
}
},
{
"category": "product_name",
"name": "RHEM 1.1 for RHEL 9",
"product": {
"name": "RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1:el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-0:1.1.3-1.el10em.src",
"product": {
"name": "flightctl-0:1.1.3-1.el10em.src",
"product_id": "flightctl-0:1.1.3-1.el10em.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.1.3-1.el10em?arch=src"
}
}
},
{
"category": "product_version",
"name": "flightctl-0:1.1.3-1.el9em.src",
"product": {
"name": "flightctl-0:1.1.3-1.el9em.src",
"product_id": "flightctl-0:1.1.3-1.el9em.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.1.3-1.el9em?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product": {
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product_id": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.1.3-1.el10em?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product": {
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product_id": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.1.3-1.el9em?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.1.3-1.el10em.src as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src"
},
"product_reference": "flightctl-0:1.1.3-1.el10em.src",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch"
},
"product_reference": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.1.3-1.el9em.src as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src"
},
"product_reference": "flightctl-0:1.1.3-1.el9em.src",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch"
},
"product_reference": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:25.130006+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "RHBZ#2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4771",
"url": "https://pkg.go.dev/vuln/GO-2026-4771"
}
],
"release_date": "2026-04-07T15:19:24.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…