RHSA-2026:43692
Vulnerability from csaf_redhat - Published: 2026-07-22 15:57 - Updated: 2026-07-25 20:49Summary
Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
Severity
Important
Notes
Topic: A new version of OpenShift API for Data Protection (OADP) is now available.
Details: OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSH_AGENT_SUCCESS (0x06) message to requests expecting typed replies (e.g., List, Sign). The unmarshal layer produces an unexpected message type, which the client code does not handle, leading to panic("unreachable") or a nil-pointer dereference. A malicious agent or forwarded connection can exploit this to terminate the client process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.
4.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. A remote attacker could provide specially crafted HTML, which, when parsed by the affected component, would consume excessive CPU resources. This could lead to a Denial of Service (DoS) condition, making the system unavailable to legitimate users.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user's browser.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only 'type' attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user's browser.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. An authenticated SSH client can cause a Denial of Service (DoS) by repeatedly opening channels that are rejected by the server. This leads to unbounded memory growth, eventually crashing the server process and affecting all connected users.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit an integer underflow and an out-of-bounds read vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the process terminating, resulting in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. When parsing arbitrary HTML that is subsequently rendered, an unexpected HTML tree can be generated. A remote attacker could leverage this vulnerability to execute Cross-Site Scripting (XSS) attacks in applications that attempt to sanitize input HTML before rendering, potentially leading to unauthorized actions or information disclosure.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. An attacker could provide specially crafted inputs that, when processed, lead to the creation of an ed25519.PrivateKey by casting malformed wire bytes. This improper input handling can cause the program to panic and crash, resulting in a Denial of Service (DoS) for the affected component.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
References
284 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of OpenShift API for Data Protection (OADP) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift API for Data Protection (OADP) enables you to back up and restore\napplication resources, persistent volume data, and internal container\nimages to external backup storage. OADP enables both file system-based and\nsnapshot-based backups for persistent volumes.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:43692",
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47911",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47913",
"url": "https://access.redhat.com/security/cve/CVE-2025-47913"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47914",
"url": "https://access.redhat.com/security/cve/CVE-2025-47914"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58181",
"url": "https://access.redhat.com/security/cve/CVE-2025-58181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58190",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25680",
"url": "https://access.redhat.com/security/cve/CVE-2026-25680"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39817",
"url": "https://access.redhat.com/security/cve/CVE-2026-39817"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39823",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39825",
"url": "https://access.redhat.com/security/cve/CVE-2026-39825"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39826",
"url": "https://access.redhat.com/security/cve/CVE-2026-39826"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39827",
"url": "https://access.redhat.com/security/cve/CVE-2026-39827"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39834",
"url": "https://access.redhat.com/security/cve/CVE-2026-39834"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40356",
"url": "https://access.redhat.com/security/cve/CVE-2026-40356"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42506",
"url": "https://access.redhat.com/security/cve/CVE-2026-42506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46598",
"url": "https://access.redhat.com/security/cve/CVE-2026-46598"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43692.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection",
"tracking": {
"current_release_date": "2026-07-25T20:49:02+00:00",
"generator": {
"date": "2026-07-25T20:49:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:43692",
"initial_release_date": "2026-07-22T15:57:51+00:00",
"revision_history": [
{
"date": "2026-07-22T15:57:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-22T15:57:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-25T20:49:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift API for Data Protection 1.6",
"product": {
"name": "OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
}
}
}
],
"category": "product_family",
"name": "OpenShift API for Data Protection"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1784059134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3A9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1784058832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-controller-rhel9@sha256%3A0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9\u0026tag=1784058953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-plugin-rhel9@sha256%3A5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9\u0026tag=1784058704"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1784058446"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1784058949"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1784059055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1784059086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-operator-bundle@sha256%3A1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1784060839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1784058822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1784058872"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1784058666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ac9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1784058364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Ae3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1784058385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1784059058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"product_id": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vm-file-restore-rhel9@sha256%3Ac1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-vm-file-restore-rhel9\u0026tag=1784058431"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"product_id": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmdp-binaries-rhel9@sha256%3A8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9\u0026tag=1784059187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-rhel9@sha256%3A14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-rhel9\u0026tag=1784059129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-filebrowser-rhel9@sha256%3Ae6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9\u0026tag=1784058355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-sshd-rhel9@sha256%3A6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9\u0026tag=1784058384"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Aa5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1784059134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3Acc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1784058832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-controller-rhel9@sha256%3A2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9\u0026tag=1784058953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-plugin-rhel9@sha256%3A7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9\u0026tag=1784058704"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Ab209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1784058446"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1784058949"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1784059055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ad7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1784059086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1784058822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Ac5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1784058872"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1784058666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ab2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1784058364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1784058385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Addbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1784059058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"product_id": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vm-file-restore-rhel9@sha256%3Acee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-vm-file-restore-rhel9\u0026tag=1784058431"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"product_id": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmdp-binaries-rhel9@sha256%3A7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9\u0026tag=1784059187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-rhel9@sha256%3A759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-rhel9\u0026tag=1784059129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-filebrowser-rhel9@sha256%3A41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9\u0026tag=1784058355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-sshd-rhel9@sha256%3A88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9\u0026tag=1784058384"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Af004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1784059134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3A6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1784058832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-controller-rhel9@sha256%3Ac2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9\u0026tag=1784058953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-plugin-rhel9@sha256%3Ab533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9\u0026tag=1784058704"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Ab15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1784058446"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1784058949"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1784059055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1784059086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Ae3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1784058822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1784058872"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1784058666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1784058364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Ac14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1784058385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1784059058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"product_id": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmdp-binaries-rhel9@sha256%3A8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9\u0026tag=1784059187"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"product_id": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmfr-access-rhel9@sha256%3A9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-vmfr-access-rhel9\u0026tag=1784059129"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1784059134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3A7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1784058832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-controller-rhel9@sha256%3A5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9\u0026tag=1784058953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-datamover-plugin-rhel9@sha256%3Af723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9\u0026tag=1784058704"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1784058446"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ab78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1784058949"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1784059055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1784059086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Afdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1784058822"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1784058872"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1784058666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ac2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1784058364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Ae659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1784058385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1784059058"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-vmdp-binaries-rhel9@sha256%3Afe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9\u0026tag=1784059187"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64 as a component of OpenShift API for Data Protection 1.6",
"product_id": "OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-47911",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-02-05T18:01:23.423406+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437109"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: The `golang.org/x/net/html` package, used across various Red Hat products, is vulnerable to a denial of service due to quadratic parsing complexity in its `html.Parse` function. An attacker providing specially crafted HTML content could exploit this flaw, leading to resource exhaustion and service unavailability in applications that process untrusted HTML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "RHBZ#2437109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47911"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4440",
"url": "https://github.com/golang/vulndb/issues/4440"
},
{
"category": "external",
"summary": "https://go.dev/cl/709876",
"url": "https://go.dev/cl/709876"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4440",
"url": "https://pkg.go.dev/vuln/GO-2026-4440"
}
],
"release_date": "2026-02-05T17:48:44.562000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html"
},
{
"cve": "CVE-2025-47913",
"discovery_date": "2025-11-13T22:01:26.092452+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2414943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSH_AGENT_SUCCESS (0x06) message to requests expecting typed replies (e.g., List, Sign). The unmarshal layer produces an unexpected message type, which the client code does not handle, leading to panic(\"unreachable\") or a nil-pointer dereference. A malicious agent or forwarded connection can exploit this to terminate the client process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability was marked as Important because it allows any malicious or misbehaving SSH agent to force a crash in the client process using a single valid protocol byte. The panic occurs before the client has a chance to validate message structure or recover, which means an attacker controlling\u2014or intercepting\u2014SSH agent traffic can reliably terminate processes that rely on agent interactions. In environments where SSH agents operate over forwarded sockets, shared workspaces, or CI/CD runners, this turns into a reliable, unauthenticated remote denial of service against critical automation or developer tooling. The flaw also stems from unsafe assumptions in the unmarshalling logic, where unexpected but protocol-legal message types drop into \u201cunreachable\u201d code paths instead of being handled gracefully\u2014making it a design-level reliability break rather than a simple error-handling bug. For this reason, it is rated as an important availability-impacting vulnerability rather than a moderate issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47913"
},
{
"category": "external",
"summary": "RHBZ#2414943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47913"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47913",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47913"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-hcg3-q754-cr77",
"url": "https://github.com/advisories/GHSA-hcg3-q754-cr77"
},
{
"category": "external",
"summary": "https://go.dev/cl/700295",
"url": "https://go.dev/cl/700295"
},
{
"category": "external",
"summary": "https://go.dev/issue/75178",
"url": "https://go.dev/issue/75178"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4116",
"url": "https://pkg.go.dev/vuln/GO-2025-4116"
}
],
"release_date": "2025-11-13T21:29:39.907000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS"
},
{
"cve": "CVE-2025-47914",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-19T21:01:06.202641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416000"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. The golang.org/x/crypto/ssh/agent library, when used in SSH Agent servers, does not properly validate the size of messages during new identity requests. A specially crafted malformed message can lead to an out-of-bounds read, causing the program to panic and resulting in a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47914"
},
{
"category": "external",
"summary": "RHBZ#2416000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416000"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914"
},
{
"category": "external",
"summary": "https://go.dev/cl/721960",
"url": "https://go.dev/cl/721960"
},
{
"category": "external",
"summary": "https://go.dev/issue/76364",
"url": "https://go.dev/issue/76364"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4135",
"url": "https://pkg.go.dev/vuln/GO-2025-4135"
}
],
"release_date": "2025-11-19T20:33:43.126000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages"
},
{
"cve": "CVE-2025-58181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-11-19T21:00:50.197590+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2415997"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat. SSH servers utilizing `golang.org/x/crypto/ssh` and configured to process GSSAPI authentication requests are susceptible to unbounded memory consumption. An attacker can exploit this by sending specially crafted GSSAPI authentication requests, potentially leading to a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58181"
},
{
"category": "external",
"summary": "RHBZ#2415997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181"
},
{
"category": "external",
"summary": "https://go.dev/cl/721961",
"url": "https://go.dev/cl/721961"
},
{
"category": "external",
"summary": "https://go.dev/issue/76363",
"url": "https://go.dev/issue/76363"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4134",
"url": "https://pkg.go.dev/vuln/GO-2025-4134"
}
],
"release_date": "2025-11-19T20:33:42.795000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication"
},
{
"cve": "CVE-2025-58190",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-02-05T18:01:26.511908+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437110"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "RHBZ#2437110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437110"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58190",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4441",
"url": "https://github.com/golang/vulndb/issues/4441"
},
{
"category": "external",
"summary": "https://go.dev/cl/709875",
"url": "https://go.dev/cl/709875"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4441",
"url": "https://pkg.go.dev/vuln/GO-2026-4441"
}
],
"release_date": "2026-02-05T17:48:44.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net"
},
{
"cve": "CVE-2026-25680",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-05-22T16:01:05.431197+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480760"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could provide specially crafted HTML, which, when parsed by the affected component, would consume excessive CPU resources. This could lead to a Denial of Service (DoS) condition, making the system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). A flaw was found in golang.org/x/net/html where parsing crafted HTML can consume excessive CPU time, leading to denial of service. Exploitation requires user interaction (a victim application parsing attacker-controlled HTML). Most Red Hat products that bundle golang.org/x/net do not use the html parser to process untrusted HTML in their supported execution paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25680"
},
{
"category": "external",
"summary": "RHBZ#2480760",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480760"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25680",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25680"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25680",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25680"
},
{
"category": "external",
"summary": "https://go.dev/cl/781702",
"url": "https://go.dev/cl/781702"
},
{
"category": "external",
"summary": "https://go.dev/issue/79573",
"url": "https://go.dev/issue/79573"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5028",
"url": "https://pkg.go.dev/vuln/GO-2026-5028"
}
],
"release_date": "2026-05-22T15:01:21.805000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/net version 0.55.0 or later. As a workaround, do not use golang.org/x/net/html to parse untrusted HTML content, or enforce timeouts on HTML parsing operations. Applications that do not parse arbitrary HTML are not affected.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39817",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-07T20:01:43.510043+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \"go tool pack\" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the \"pack\" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39817"
},
{
"category": "external",
"summary": "RHBZ#2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39817",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817"
},
{
"category": "external",
"summary": "https://go.dev/cl/767520",
"url": "https://go.dev/cl/767520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78778",
"url": "https://go.dev/issue/78778"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4979",
"url": "https://pkg.go.dev/vuln/GO-2026-4979"
}
],
"release_date": "2026-05-07T19:41:18.993000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39823",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-07T20:00:58.284024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL\u0027s content attribute inside a `\u003cmeta\u003e` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products ship the Go `html/template` package as a dependency of various Go-based components. The affected functionality involves URL escaping inside `\u003cmeta\u003e` tag content attributes, which requires an application to render user-controlled URLs in meta tags using `html/template`. While the vulnerable code is present, exploitation requires a specific usage pattern that is uncommon in Red Hat product code paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "RHBZ#2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://go.dev/cl/769920",
"url": "https://go.dev/cl/769920"
},
{
"category": "external",
"summary": "https://go.dev/issue/78913",
"url": "https://go.dev/issue/78913"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4982",
"url": "https://pkg.go.dev/vuln/GO-2026-4982"
}
],
"release_date": "2026-05-07T19:41:19.524000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Ensure that user-supplied URLs are validated and sanitized before being passed to Go\u0027s `html/template` package for rendering in HTML meta tag content attributes. Avoid rendering untrusted URL data directly in meta tag content attributes.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content"
},
{
"cve": "CVE-2026-39825",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"discovery_date": "2026-05-07T20:01:37.714133+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467823"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s net/http/httputil package where ReverseProxy can forward query parameters that are hidden from Rewrite or Director functions. This occurs when the number of query parameters exceeds the url.ParseQuery limit (controlled by the GODEBUG setting urlmaxqueryparams). While Red Hat ships Go-based components across many products, exploitation requires that an application use ReverseProxy with a Rewrite or Director function that relies on query parameter inspection for security enforcement, which limits the practical impact of this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39825"
},
{
"category": "external",
"summary": "RHBZ#2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39825",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39825"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825"
},
{
"category": "external",
"summary": "https://go.dev/cl/770541",
"url": "https://go.dev/cl/770541"
},
{
"category": "external",
"summary": "https://go.dev/issue/78948",
"url": "https://go.dev/issue/78948"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4976",
"url": "https://pkg.go.dev/vuln/GO-2026-4976"
}
],
"release_date": "2026-05-07T19:41:18.453000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Increase the maximum number of query parameters allowed by setting the GODEBUG environment variable `urlmaxqueryparams` to a higher value (e.g., `GODEBUG=urlmaxqueryparams=20000`), or validate and enforce security controls on query parameters at the backend service rather than relying solely on the ReverseProxy\u0027s Rewrite or Director function for security filtering.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls"
},
{
"cve": "CVE-2026-39826",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-07T20:01:46.305827+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467826"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only \u0027type\u0027 attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39826"
},
{
"category": "external",
"summary": "RHBZ#2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39826",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39826"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826"
},
{
"category": "external",
"summary": "https://go.dev/cl/771180",
"url": "https://go.dev/cl/771180"
},
{
"category": "external",
"summary": "https://go.dev/issue/78981",
"url": "https://go.dev/issue/78981"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4980",
"url": "https://pkg.go.dev/vuln/GO-2026-4980"
}
],
"release_date": "2026-05-07T19:41:19.138000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping"
},
{
"cve": "CVE-2026-39827",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:32.990556+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480682"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. An authenticated SSH client can cause a Denial of Service (DoS) by repeatedly opening channels that are rejected by the server. This leads to unbounded memory growth, eventually crashing the server process and affecting all connected users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39827"
},
{
"category": "external",
"summary": "RHBZ#2480682",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480682"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39827",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39827"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39827",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39827"
},
{
"category": "external",
"summary": "https://go.dev/cl/781320",
"url": "https://go.dev/cl/781320"
},
{
"category": "external",
"summary": "https://go.dev/issue/35127",
"url": "https://go.dev/issue/35127"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5016",
"url": "https://pkg.go.dev/vuln/GO-2026-5016"
}
],
"release_date": "2026-05-22T02:31:27.064000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39834",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-22T04:01:15.681060+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480676"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39834"
},
{
"category": "external",
"summary": "RHBZ#2480676",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480676"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39834",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39834"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834"
},
{
"category": "external",
"summary": "https://go.dev/cl/781663",
"url": "https://go.dev/cl/781663"
},
{
"category": "external",
"summary": "https://go.dev/issue/79567",
"url": "https://go.dev/issue/79567"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5020",
"url": "https://pkg.go.dev/vuln/GO-2026-5020"
}
],
"release_date": "2026-05-22T02:31:27.540000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-40356",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-04-28T07:01:37.543641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463368"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit an integer underflow and an out-of-bounds read vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the process terminating, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact denial of service flaw in MIT Kerberos 5 (krb5) allows an unauthenticated remote attacker to trigger an integer underflow and out-of-bounds read. This vulnerability, which can lead to process termination, specifically affects systems where the NegoEx mechanism is registered and `gss_accept_sec_context()` is called. While Kerberos is a fundamental service, the prerequisite of a registered NegoEx mechanism limits the attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40356"
},
{
"category": "external",
"summary": "RHBZ#2463368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463368"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40356"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40356",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40356"
},
{
"category": "external",
"summary": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html",
"url": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html"
},
{
"category": "external",
"summary": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f",
"url": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f"
},
{
"category": "external",
"summary": "https://web.mit.edu/kerberos/advisories/",
"url": "https://web.mit.edu/kerberos/advisories/"
}
],
"release_date": "2026-04-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that the NegoEx mechanism is not registered in the `/etc/gss/mech` configuration file. Removing the corresponding entry from this file will prevent the vulnerable code path from being activated. This action may impact services that rely on the NegoEx GSS-API mechanism. A restart of affected Kerberos-dependent services may be required for the change to take effect.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-42506",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:02.675281+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480759"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When parsing arbitrary HTML that is subsequently rendered, an unexpected HTML tree can be generated. A remote attacker could leverage this vulnerability to execute Cross-Site Scripting (XSS) attacks in applications that attempt to sanitize input HTML before rendering, potentially leading to unauthorized actions or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in `golang.org/x/net/html` can lead to Cross-Site Scripting (XSS) in applications that process and render untrusted HTML, even when input sanitization is implemented. The vulnerability arises from an unexpected HTML tree structure generated during parsing, potentially allowing a remote attacker to execute arbitrary script code in the user\u0027s browser, leading to information disclosure or unauthorized actions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42506"
},
{
"category": "external",
"summary": "RHBZ#2480759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480759"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506"
},
{
"category": "external",
"summary": "https://go.dev/cl/781700",
"url": "https://go.dev/cl/781700"
},
{
"category": "external",
"summary": "https://go.dev/issue/79571",
"url": "https://go.dev/issue/79571"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5025",
"url": "https://pkg.go.dev/vuln/GO-2026-5025"
}
],
"release_date": "2026-05-22T15:01:21.056000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/net version 0.55.0 or later. As a workaround, do not use golang.org/x/net/html to parse and re-render untrusted HTML content. Applications that do not parse arbitrary HTML are not affected.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-46598",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-05-22T04:01:24.490498+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480679"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. An attacker could provide specially crafted inputs that, when processed, lead to the creation of an ed25519.PrivateKey by casting malformed wire bytes. This improper input handling can cause the program to panic and crash, resulting in a Denial of Service (DoS) for the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate denial of service flaw exists in the `golang.org/x/crypto/ssh/agent` package. This vulnerability allows an attacker to provide specially crafted inputs that, when processed by the SSH agent, can lead to a program panic and crash. This could result in a temporary disruption of services that rely on the affected SSH agent functionality.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46598"
},
{
"category": "external",
"summary": "RHBZ#2480679",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480679"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46598"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46598",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46598"
},
{
"category": "external",
"summary": "https://go.dev/cl/781360",
"url": "https://go.dev/cl/781360"
},
{
"category": "external",
"summary": "https://go.dev/issue/79596",
"url": "https://go.dev/issue/79596"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5033",
"url": "https://pkg.go.dev/vuln/GO-2026-5033"
}
],
"release_date": "2026-05-22T02:31:27.986000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-22T15:57:51+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict the exposure of the SSH agent to untrusted sources. Avoid enabling SSH agent forwarding when connecting to untrusted hosts or environments. Ensure that applications interacting with `golang.org/x/crypto/ssh/agent` validate all inputs to prevent malformed data from being processed. Reloading or restarting SSH services may be required for changes to take effect.",
"product_ids": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:7ddc295bfa28d274fa8cb25c08a5646cd3c73f4e373e879c4729e5dce2c1a2ef_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:a5e4b9c4324114ef3de7ffe75736fa267e8f05b1198e3014475b93b0d2a0b945_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:f004c6f3d3c31329ccf40d62a83d72490b73d555950173ea43e7cf07532653c5_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:6de24aac166b8772fdb7918571696bf074a588267bda0835593c1b9f5e4df704_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:7aab17881b9df52b5c7420b9d6c79912ce1f71c47bf9110cfbd650d6cf6fd339_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:9d44953f858d33aa4b49433eaaf267d56549e91e3f75454c42ea20bd68b558b8_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:cc9b31528ec928edae14485f74955833aa75b486c488a62b7fcc14c65d73723f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:0cd6baa9a55d0ba2c90d8e7b416cf4ceb1116bd2533b754a72f0f38ccea4901e_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:2348e3691e7c8edc74411af0352536c2d3aa7cff8ce79ea1dd4403af19dd08f7_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:5be20f5d5b35476c17fa8a5edfde8956092f25727ac35fc69d188350644ce3a2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-controller-rhel9@sha256:c2a4be3d64ecb93958479b07767957632da0390873604bf263bfca4c979bae85_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:5fbc3a3bf357c1b274833a30595deda79080e41758b331f4c8632b656f87d9e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:7c3897d545904e1ed41cdbfb57db667c0c18f67347d086177a89b2ecf4d74c74_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:b533a0d9eb71a350cfb7690e35248b074b86be8b23f87fb1aca8561365d93288_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-datamover-plugin-rhel9@sha256:f723efa2747af15cb9ab2d636e9c2784c817dd5f77aa0f019fe78d54d3bac13f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:77b8164d79c81b2c3c73ae2407aaab59415ffc58a64020875e94455af13fee3a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:95bb0095ab17e83f5ef0277fc0936d4954b0b2f3f031af43f74c39c01a9fc2ab_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b15e717372414b903cc478a962d36993d7b5bdbf52abf224448e150906f6fc18_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:b209265c88567b1c81727d7fcfe500c9c14c0822d83dfd0c13695388cdbece81_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3f005d4e87ef8b4b19b21f3fc3cf8a2dd0afd8a8778b3274c0a0552a9c0ad256_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:523ab671f0c099798f60919c87b2e5215fb65d71f3b677e2096ed12d6c25ce36_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:7b9c66c952ff3b1e246927be7fd083bb37eeba4d3e53d2b53a648b4f7fe7064f_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b78935df05642d604919f0022cd3aa5898bc42a545f5827811e5b58035f2809c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:0581a5d243f65fc6d060802b31953faebe3c9bbd923755d672012f6c32c53168_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:7e27521f062cff1c65a064dc01adef8b88a14acdfd72c3594adf28a9e7651cfa_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:8ad67453e34addf49fbdf3c7ff09a2b3d4120241748c59c1afeca5138fe7b9ba_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:92a7330d9118513d72da01e99456cc6c49e7850909c50e191566b935da6b9f68_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-operator-bundle@sha256:1ff9c955b2b9842d0a7e57666c545ff68d35b36a202786df6f94e9653b9cce10_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:0443a738e0dc32182ea97b6bb84ccf48289ce081bad5b0c419e4365d597c5ca0_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:56b20bc99ae167d96fb307c8be5dd2c22c19ca02015cc7ae823289089ca57524_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:9b76270cba67042991d7626b7e35f5903b9c1154ac8ccccaeb5a0ddeba31eac9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d7b888697cb18c3911a36e76dd485402570123adadea82c44db495ec12d00e73_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4e7c7af49c430cab3eb7cc93de737bae7887f620d030432cb69ba2506d2c320c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:595ab0daa19884114d3efc5a9d47e5d937586d941cd52963f61bb1ead0e15243_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6523cc3badba39edd5ae3aa86b774855ac18f228630ac264502be1ea9c9e1edc_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:7f4124da40cc5a303d91e6cfe10328ce51873b7f63009519fed1f3e005b00f4a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85e0a597876742d035720877f54211c932e5eccfccde432d3d7f534d67025ea3_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b2a721db67e21a2e5ebbc36495ee60ffef943839706bf27670bc9044fafc9351_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c2a5bac58af2070feac2ce23a1215e12ea47ad8d080d7a37fa775e5c569d99c2_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:c9e86e026c6178d0d14b3b493ed3da5c082c542ce912116d6c6ffe485f672658_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:4af8e092ac515f7b6219b2ed2d8fee6f9e66f4d95c1be6f6ba544366f3742eb9_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c14f1329cfad3cbff78686daeb8ad0e3a0459981847dc46745e70db8adee1c08_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e3d48d0cfcd0a2e737d263af21ff15091f610f7eaec48e1f642e0b7ee51b9ef4_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:e659d3df31bf2f556f29e95c480cc3c263c295e5cf062f9cfce9f0c0f274519c_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:1e6003cb865c83854fef387ef67d6f123a7116d57ccb1a89a5a4bc2e5881760b_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:367c1427caeb727d7298f17412e612b7f4caafd3be77b3b51083ce120554236e_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:5984ce138b1491baff91971663df8c6387388381d8edd455b8c771b69ee707f9_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ddbe19ffc5731e1ad8dacf537752bb9e612cf8786bc95711a24b25a1e4921f3a_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:5378ff365d367d9e6ca14a8d81fe4e2a64a3392d31c494d85d231b8b7df5845c_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:64a629f87f78447b6df09caa79cca73e53655e4b1ac4e51116056c6663a6fbf6_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:912b31254e58d977c5448c7b7d5a723d8e62a377bb5b69ac5d8d6101f7d335f3_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c5c37de91467fbd4319dd667a8528c6f45b198a1323e23e6536e76397336b25d_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4da545acd9a8615d51fcc8c014599ab4df309ee412eee1403f4f8b1472e92803_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:e3acf1706978b91bf6a1bfcbaaf5b0e380a6e56f59a5fc232400228697379c87_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:fdcb05809e9f385b137701487fab4926e99543f37552af5d62ebd54766c8c688_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:c1a62d06a25dc13020fffb1431ab248a8e0fd23455c10b9fa500f35f38c0a24d_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vm-file-restore-rhel9@sha256:cee5df45839981e5a537df2266d90b3b56edf855d7058706c4f6a603db4136e3_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:7495259636ae75980f52bbba531083d019a0ba4d33ab4ccf19e0beb2a18e0776_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8c670e9f442f576c765e0859fb52540565a779420b0d9c5a6ea75bc2149ac8e5_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:8de0eac6a6a60878745fc33ddb4420b26b25a0524a5b98a1a7d05942502acfd9_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmdp-binaries-rhel9@sha256:fe742395e18ceef92eb11cf1eadc119c693cbcfd0ac986a3b82dd65f3613ac7f_ppc64le",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:41f92f33d1e6df63305ce1207124a9a205632e61aa2e866f97430e66978a4424_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-filebrowser-rhel9@sha256:e6b8594ec7b8e47edee5eabc7b3097f49c442cb0c208a5f388d0891b612d4e2a_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:14b95c56b17519fac217d787a9c5de798f3e97dabb0d5845e7d1006d037b65fe_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:759640af7be9d53378c051fafc4592cee9f1a6d442594e67aacee0c514cb6730_arm64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-rhel9@sha256:9d41e8017f164f2be0f3d3a43479b312a9f5816342e5d0d94ef2d68f3aa94727_s390x",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:6a9af4e0c9264b0a954e7d449c8792a36c6f95d8a89f14d426c999167429e313_amd64",
"OpenShift API for Data Protection 1.6:registry.redhat.io/oadp/oadp-vmfr-access-sshd-rhel9@sha256:88e43a16ba6d2af68816230bdcc7bd701fa697dcb1ba7c47feb3e014725b250e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…