RHSA-2026:10155
Vulnerability from csaf_redhat - Published: 2026-04-23 13:57 - Updated: 2026-04-24 18:04A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod's filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Builds 1.6.5",
"title": "Topic"
},
{
"category": "general",
"text": "Releases of Red Hat OpenShift Builds 1.6.5",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10155",
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33211",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.6",
"url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.6"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10155.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5",
"tracking": {
"current_release_date": "2026-04-24T18:04:04+00:00",
"generator": {
"date": "2026-04-24T18:04:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2026:10155",
"initial_release_date": "2026-04-23T13:57:56+00:00",
"revision_history": [
{
"date": "2026-04-23T13:57:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T13:58:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-24T18:04:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Builds 1.6.4",
"product": {
"name": "Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_builds:1.6::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Builds"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Aa22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3A60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776937737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Af54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Ac6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Ac95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ad6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ad69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Ac44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Ae1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ac5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ae095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Ab3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Aa9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ad56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Af4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64 as a component of Red Hat OpenShift Builds 1.6.4",
"product_id": "Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:57:56+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.4 upgrades to to 1.6.5",
"product_ids": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33211",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-24T00:02:20.093480+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450554"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod\u0027s filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to have the permission to create ResolutionRequests (e.g., by creating TaskRuns or PipelineRuns that use the git resolver) within at least one specific namespace, limiting the exposure of this issue to authenticated users. Also, an attacker can read any file readable by the resolver pod process, including cluster secrets, allowing an escalation of privileges from namespace-scoped access to cluster-wide access. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "RHBZ#2450554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450554"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c",
"url": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5",
"url": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd",
"url": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae",
"url": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e",
"url": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db",
"url": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78",
"url": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c",
"url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c"
}
],
"release_date": "2026-03-23T23:55:54.089000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:57:56+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.4 upgrades to to 1.6.5",
"product_ids": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict the creation of ResolutionRequests to trusted users and service accounts. Implement strict Role-Based Access Control (RBAC) policies to limit which tenants can create TaskRuns or PipelineRuns that utilize the Tekton Pipelines git resolver. This reduces the exposure by preventing unauthorized access to the resolver pod\u0027s filesystem.",
"product_ids": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:57:56+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.4 upgrades to to 1.6.5",
"product_ids": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.4:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
}
]
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.