Vulnerability-Lookup

RHSA-2026:7052

Vulnerability from csaf_redhat - Published: 2026-04-08 12:26 - Updated: 2026-04-10 22:24

Summary

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.14

Severity

Important

Notes

Topic: Logging for Red Hat OpenShift - 6.0.14

Details: Red Hat OpenShift Logging 6.0.14 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-61726

A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Vendor Fix For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes For Red Hat OpenShift Logging 6.0, see the following instructions to apply this update: https://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0 https://access.redhat.com/errata/RHSA-2026:7052

Workaround Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

CVE-2025-61729

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

CVE-2025-68121

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

References

URL

Category

	https://access.redhat.com/errata/RHSA-2026:7052	self
	https://access.redhat.com/security/cve/CVE-2025-61726	external
	https://access.redhat.com/security/cve/CVE-2025-61729	external
	https://access.redhat.com/security/cve/CVE-2025-68121	external
	https://access.redhat.com/security/updates/classi…	external
	https://security.access.redhat.com/data/csaf/v2/a…	self
	https://access.redhat.com/security/cve/CVE-2025-61726	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2434432	external
	https://www.cve.org/CVERecord?id=CVE-2025-61726	external
	https://nvd.nist.gov/vuln/detail/CVE-2025-61726	external
	https://go.dev/cl/736712	external
	https://go.dev/issue/77101	external
	https://groups.google.com/g/golang-announce/c/Vd2…	external
	https://pkg.go.dev/vuln/GO-2026-4341	external
	https://access.redhat.com/security/cve/CVE-2025-61729	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2418462	external
	https://www.cve.org/CVERecord?id=CVE-2025-61729	external
	https://nvd.nist.gov/vuln/detail/CVE-2025-61729	external
	https://go.dev/cl/725920	external
	https://go.dev/issue/76445	external
	https://groups.google.com/g/golang-announce/c/8FJ…	external
	https://pkg.go.dev/vuln/GO-2025-4155	external
	https://access.redhat.com/security/cve/CVE-2025-68121	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2437111	external
	https://www.cve.org/CVERecord?id=CVE-2025-68121	external
	https://nvd.nist.gov/vuln/detail/CVE-2025-68121	external
	https://go.dev/cl/737700	external
	https://go.dev/issue/77217	external
	https://groups.google.com/g/golang-announce/c/K09…	external
	https://pkg.go.dev/vuln/GO-2026-4337	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Logging for Red Hat OpenShift - 6.0.14",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Logging 6.0.14 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:7052",
        "url": "https://access.redhat.com/errata/RHSA-2026:7052"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
        "url": "https://access.redhat.com/security/cve/CVE-2025-61726"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
        "url": "https://access.redhat.com/security/cve/CVE-2025-61729"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
        "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7052.json"
      }
    ],
    "title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.14",
    "tracking": {
      "current_release_date": "2026-04-10T22:24:32+00:00",
      "generator": {
        "date": "2026-04-10T22:24:32+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.5"
        }
      },
      "id": "RHSA-2026:7052",
      "initial_release_date": "2026-04-08T12:26:52+00:00",
      "revision_history": [
        {
          "date": "2026-04-08T12:26:52+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-08T12:27:03+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-10T22:24:32+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Logging Subsystem for Red Hat OpenShift 6",
                "product": {
                  "name": "Logging Subsystem for Red Hat OpenShift 6",
                  "product_id": "Logging Subsystem for Red Hat OpenShift 6",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:logging:6.0::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Logging Subsystem for Red Hat OpenShift"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3Ad209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774968306"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Ab9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774549440"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774879689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774879741"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3Abf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774880815"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774880783"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-operator-bundle@sha256%3A066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774968543"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3A5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774890842"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Ac9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774881157"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3A95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774881153"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774549440"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Ad9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774879689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774879741"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3Aa74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774880815"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774880783"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3Aa0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774890842"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774881157"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ad44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774881153"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774549440"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Ac15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774879689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774879741"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3A2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774880815"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774880783"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3A4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774890842"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774881157"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ab37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774881153"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774549440"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Adc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774879689"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774879741"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3Ab07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774880815"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774880783"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3A47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774890842"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Acec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774881157"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3A37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging\u0026tag=1774881153"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x as a component of Logging Subsystem for Red Hat OpenShift 6",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-61726",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-01-28T20:01:42.791305+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2434432"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61726"
        },
        {
          "category": "external",
          "summary": "RHBZ#2434432",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/736712",
          "url": "https://go.dev/cl/736712"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77101",
          "url": "https://go.dev/issue/77101"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
          "url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4341",
          "url": "https://pkg.go.dev/vuln/GO-2026-4341"
        }
      ],
      "release_date": "2026-01-28T19:30:31.215000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-08T12:26:52+00:00",
          "details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:7052"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
    },
    {
      "cve": "CVE-2025-61729",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2025-12-02T20:01:45.330964+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2418462"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61729"
        },
        {
          "category": "external",
          "summary": "RHBZ#2418462",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/725920",
          "url": "https://go.dev/cl/725920"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/76445",
          "url": "https://go.dev/issue/76445"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
          "url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-4155",
          "url": "https://pkg.go.dev/vuln/GO-2025-4155"
        }
      ],
      "release_date": "2025-12-02T18:54:10.166000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-08T12:26:52+00:00",
          "details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:7052"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
    },
    {
      "cve": "CVE-2025-68121",
      "discovery_date": "2026-02-05T18:01:30.086058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2437111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
          "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "RHBZ#2437111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/737700",
          "url": "https://go.dev/cl/737700"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77217",
          "url": "https://go.dev/issue/77217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
          "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4337",
          "url": "https://pkg.go.dev/vuln/GO-2026-4337"
        }
      ],
      "release_date": "2026-02-05T17:48:44.141000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-08T12:26:52+00:00",
          "details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:7052"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d44b5e861efd3636be088e5faf0fd212621614f5cdf774e417f7105cc5595bfa_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:17ad87c07de357a7edcf3b97a2173b70e77bec85343e9250e925c1a7ba99c412_amd64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3be6b8f3d249c299c199f6bbf04c889187a98c5703f648a8ccf8a4a4b74a4ba1_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:492538a110bc0e6280e09901eb5a0851b25e8979803c3ca2902384a53bb1d27f_arm64",
            "Logging Subsystem for Red Hat OpenShift 6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:6ebd083a221161c63180b2aaba528ef2888f784074210cf21dee533b9ac0f269_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
    }
  ]
}

CVE-2025-61726 (GCVE-0-2025-61726)

Vulnerability from cvelistv5 – Published: 2026-01-28 19:30 – Updated: 2026-01-29 18:31

Title

Memory exhaustion in query parameter parsing in net/url

Summary

The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

References

URL

Tags

	https://go.dev/cl/736712
	https://go.dev/issue/77101
	https://groups.google.com/g/golang-announce/c/Vd2…
	https://pkg.go.dev/vuln/GO-2026-4341

Impacted products

	Vendor	Product	Version
	Go standard library	net/url	Affected: 0 , < 1.24.12 (semver) Affected: 1.25.0 , < 1.25.6 (semver)

Credits

jub0bs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-61726",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-29T18:31:39.150633Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-29T18:31:59.685Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/url",
          "product": "net/url",
          "programRoutines": [
            {
              "name": "parseQuery"
            },
            {
              "name": "ParseQuery"
            },
            {
              "name": "URL.Query"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.24.12",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.25.6",
              "status": "affected",
              "version": "1.25.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "jub0bs"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-28T19:30:31.215Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/736712"
        },
        {
          "url": "https://go.dev/issue/77101"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4341"
        }
      ],
      "title": "Memory exhaustion in query parameter parsing in net/url"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2025-61726",
    "datePublished": "2026-01-28T19:30:31.215Z",
    "dateReserved": "2025-09-30T15:05:03.605Z",
    "dateUpdated": "2026-01-29T18:31:59.685Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-68121 (GCVE-0-2025-68121)

Vulnerability from cvelistv5 – Published: 2026-02-05 17:48 – Updated: 2026-02-20 16:05

Title

Unexpected session resumption in crypto/tls

Summary

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.

Severity ?

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-295 - Improper Certificate Validation

Assigner

References

URL

Tags

	https://groups.google.com/g/golang-announce/c/K09…
	https://go.dev/cl/737700
	https://go.dev/issue/77217
	https://pkg.go.dev/vuln/GO-2026-4337

Impacted products

	Vendor	Product	Version
	Go standard library	crypto/tls	Affected: 0 , < 1.24.13 (semver) Affected: 1.25.0-0 , < 1.25.7 (semver) Affected: 1.26.0-rc.1 , < 1.26.0-rc.3 (semver)

Credits

Coia Prant (github.com/rbqvq) Go Security Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-68121",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-20T16:05:03.924102Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-295",
                "description": "CWE-295 Improper Certificate Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-20T16:05:07.679Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/tls",
          "product": "crypto/tls",
          "programRoutines": [
            {
              "name": "Conn.handshakeContext"
            },
            {
              "name": "Conn.Handshake"
            },
            {
              "name": "Conn.HandshakeContext"
            },
            {
              "name": "Conn.Read"
            },
            {
              "name": "Conn.Write"
            },
            {
              "name": "Dial"
            },
            {
              "name": "DialWithDialer"
            },
            {
              "name": "Dialer.Dial"
            },
            {
              "name": "Dialer.DialContext"
            },
            {
              "name": "QUICConn.Start"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.24.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.25.7",
              "status": "affected",
              "version": "1.25.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.0-rc.3",
              "status": "affected",
              "version": "1.26.0-rc.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Coia Prant (github.com/rbqvq)"
        },
        {
          "lang": "en",
          "value": "Go Security Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-295: Improper Certificate Validation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-05T17:48:44.141Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
        },
        {
          "url": "https://go.dev/cl/737700"
        },
        {
          "url": "https://go.dev/issue/77217"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-4337"
        }
      ],
      "title": "Unexpected session resumption in crypto/tls"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2025-68121",
    "datePublished": "2026-02-05T17:48:44.141Z",
    "dateReserved": "2025-12-15T16:48:04.451Z",
    "dateUpdated": "2026-02-20T16:05:07.679Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-61729 (GCVE-0-2025-61729)

Vulnerability from cvelistv5 – Published: 2025-12-02 18:54 – Updated: 2025-12-03 19:37

Title

Excessive resource consumption when printing error string for host certificate validation in crypto/x509

Summary

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

References

URL

Tags

	https://go.dev/cl/725920
	https://go.dev/issue/76445
	https://groups.google.com/g/golang-announce/c/8FJ…
	https://pkg.go.dev/vuln/GO-2025-4155

Impacted products

	Vendor	Product	Version
	Go standard library	crypto/x509	Affected: 0 , < 1.24.11 (semver) Affected: 1.25.0 , < 1.25.5 (semver)

Credits

Philippe Antoine (Catena cyber)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-61729",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-02T21:52:36.341575Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-02T21:52:58.224Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "Certificate.VerifyHostname"
            },
            {
              "name": "Certificate.Verify"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.24.11",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.25.5",
              "status": "affected",
              "version": "1.25.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Philippe Antoine (Catena cyber)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-03T19:37:14.903Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/725920"
        },
        {
          "url": "https://go.dev/issue/76445"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2025-4155"
        }
      ],
      "title": "Excessive resource consumption when printing error string for host certificate validation in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2025-61729",
    "datePublished": "2025-12-02T18:54:10.166Z",
    "dateReserved": "2025-09-30T15:05:03.605Z",
    "dateUpdated": "2025-12-03T19:37:14.903Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:7052

CVE-2025-61726 (GCVE-0-2025-61726)

CVE-2025-68121 (GCVE-0-2025-68121)

CVE-2025-61729 (GCVE-0-2025-61729)

Tags

Sightings

Nomenclature